CVE-2005-2105: Cisco IOS

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Cisco IOS 12.2T through 12.4 allows remote attackers to bypass Authentication, Authorization, and Accounting (AAA) RADIUS authentication, if the fallback method is set to none, via a long username.

Affected products

• Cisco IOS: version 12.2(2)xr only; version 12.2(4)xr only; version 12.2t only; version 12.2xb only; version 12.2xc only; version 12.2xd only; …

Published 2005-07-05. Last modified 2026-06-16.