CVE-2000-0945

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 72.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-12-19 · updated 2026-09-23

Description

The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.

Affected products

Cisco Catalyst 3500 Xl: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html
http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html
http://www.osvdb.org/444
http://www.securityfocus.com/bid/1846
https://exchange.xforce.ibmcloud.com/vulnerabilities/5415
http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html
http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html
http://www.osvdb.org/444
http://www.securityfocus.com/bid/1846
https://exchange.xforce.ibmcloud.com/vulnerabilities/5415

Get alerted when CVE-2000-0945 or the next vulnerability affects your stack