CVE-2003-0647: Cisco IOS

High severity, CVSS 7.5. EPSS: 5.9% chance of exploitation in the next 30 days.

Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.

Affected products

• Cisco IOS: up to and including 12.2

Published 2003-08-27. Last modified 2026-06-16.