PT-2001-2210 · Cisco · Cisco 600 Series Routers+1

Published 2001-08-31 · Updated 2017-12-19 · CVE-2001-1065

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco 600 series routers running CBOS versions 2.0.1 through 2.4.2ap

Description The web-based configuration utility in the affected routers binds itself to port 80, even when the web-based configuration services are disabled. This could potentially leave the router open to attack.

Recommendations For Cisco 600 series routers running CBOS versions 2.0.1 through 2.4.2ap, consider disabling the web-based configuration utility to minimize the risk of exploitation. Restrict access to port 80 to prevent potential attacks.

Fix

Related Identifiers

CVE-2001-1065

Affected Products

Cbos

Cisco 600 Series Routers

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1065 · Security Note
• http://cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7027 · Note