CVE-2006-3595

high Cisco
CVSS v3 Base Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score
2.0%
Exploitation probability in 30 days
Top 16% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Published: July 18, 2006 (7239 days ago)
Last Modified: April 16, 2026
Vendor: Cisco
Source: NVD

Description

The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.

CWE

NVD-CWE-Other

Affected Products

cisco router web setup

References

🔗 secunia.com 🔗 securitytracker.com 🔗 www.cisco.com 🔗 www.kb.cert.org 🔗 www.osvdb.org