Every CVE Search/ Get API key

CVE-2001-1434

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and...

5.0 Medium

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created.

Exploit likelihood

2.74%Up 1.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created.

Record
CVE-2001-1434
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created.

Record
CVE-2001-1434
Updated
2026-11-02
EUVDEUVD-2001-1414 No score

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created.

Record
EUVD-2001-1414
Updated
2026-11-03
GitHub AdvisoriesGHSA-rrrh-29xf-2p7r No score

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and...

Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created.

Record
GHSA-rrrh-29xf-2p7r
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1434 is a medium vulnerability (CVSS 5.0) in Cisco Ios, published February 28, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.74%, the 86th percentile. No source names a fixed version.

References

MoveEnter Open