CVE-2001-0537: Cisco IOS

High severity, CVSS 9.3. EPSS: 68.5% chance of exploitation in the next 30 days.

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

Affected products

• Cisco IOS: version 11.3 only; version 11.3aa only; version 11.3da only; version 11.3db only; version 11.3ha only; version 11.3ma only; …

Published 2001-07-21. Last modified 2026-06-16.