CVE Catalog
CVE-2000-0380
HighExploitation Probability (EPSS)
Very high risk35.01%
98th percentile - higher than 98% of all known CVEs
Summary
The HTTP service in Cisco routers and switches running IOS versions 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
Risk Assessment
Attackers can remotely disrupt the operation of network devices, leading to service availability issues.
Recommendation
It is recommended to update the IOS software to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.