NVD

Id
62269  
Name
CVE-2006-3595  
Description
The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2011-03-07  
Seq
2006-3595  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322652 62269 CVE-2006-3595 oval:org.mitre.oval:def:5826  View
322653 62269 CVE-2006-3595 1016476  View
322654 62269 CVE-2006-3595 20060712 Cisco Router Web Setup Ships with Insecure Default IOS Configuration  View
322655 62269 CVE-2006-3595 VU#205225  View
322656 62269 CVE-2006-3595 18953  View
322657 62269 CVE-2006-3595 ADV-2006-2773  View
322658 62269 CVE-2006-3595 cisco-crws-command-execution(27688)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58195 JVNDB-2006-000391 Cisco Router Web Setup ツールにおける不適切な設定により認証を回避される脆弱性 Cisco ルータには、Cisco Router Web Setup (CRWS) ツールに含まれる Cisco IOS 用のデフォルト設定ファイルに不備が存在するため、デフォルト設定ファイルで IOS が動作している場合、認証を介さずに任意の権限で Cisco IOS HTTP server にアクセス可能となる脆弱性が存在します。 CVE-2006-3595 19697 CVE-2006-3595 62269 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000391.html 2006-07-12 2007-04-01 View