Unscored CVE-2006-3595 EUVD-2006-3590GHSA-63x6-9wjm-8hc2

The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which all…

Published Jul 14, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.

References

VU#205225 third-party-advisory
1016476 vdb-entry
cisco-crws-command-execution(27688) vdb-entry
18953 vdb-entry
27159 vdb-entry
21028 third-party-advisory
ADV-2006-2773 vdb-entry
oval:org.mitre.oval:def:5826 vdb-entry signature
20060712 Cisco Router Web Setup Ships with Insecure Default IOS Configuration vendor-advisory