CVE-2000-0945: Cisco Catalyst 3500 Xl

High severity, CVSS 10.0. EPSS: 72.6% chance of exploitation in the next 30 days.

The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.

Affected products

• Cisco Catalyst 3500 Xl: any version

Published 2000-12-19. Last modified 2026-09-23.