Back to search
CVE-2006-3595
Published: Jul 14, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
VU#205225
third-party-advisory
x_refsource_CERT-VN
1016476
vdb-entry
x_refsource_SECTRACK
cisco-crws-command-execution(27688)
vdb-entry
x_refsource_XF
18953
vdb-entry
x_refsource_BID
27159
vdb-entry
x_refsource_OSVDB
21028
third-party-advisory
x_refsource_SECUNIA
ADV-2006-2773
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:5826
vdb-entry
signature
x_refsource_OVAL
20060712 Cisco Router Web Setup Ships with Insecure Default IOS Configuration
vendor-advisory
x_refsource_CISCO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now