CVE-2006-0485: Cisco IOS

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.

Affected products

• Cisco IOS: version 12.0t only; version 12.0xh only; version 12.0xk only; version 12.0xl only; version 12.0xn only; version 12.0xr only; …

Published 2006-02-01. Last modified 2026-06-16.