CVE-2000-0368
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain...
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
Exploit likelihood
What each source reports
NVD Score used
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
- Record
CVE-2000-0368- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
- Record
CVE-2000-0368- Updated
- 2026-11-02
EUVDEUVD-2000-0367 No score
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
- Record
EUVD-2000-0367- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fxrh-cvvm-q99f No score
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain...
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
- Record
GHSA-fxrh-cvvm-q99f- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-0368 is a low vulnerability (CVSS 2.1) in Cisco Ios, published March 12, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.