Unscored severity · published Oct 20, 2003
CVE-2003-0732
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the…
–
CVSS
2.1%
EPSS
No
On KEV
Description
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Ciscoworks Cd1 · Cisco
1st; 2nd; 3rd; 4th; 5th · source: NVD
CC
Ciscoworks Common Management Foundation · Cisco
2.0; 2.1 · source: NVD
RM
Resource Manager · Cisco
1.0; 1.1 · source: NVD
RM
Resource Manager Essentials · Cisco
2.0; 2.1; 2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0732
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0732
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20030813-cmf.shtml
Exploit
http://www.securityfocus.com/archive/1/333028
More from Ciscoworks Cd1
–
CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service…
–
CVE-2003-0731
CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to…