CVE-2000-0345
CVE-2000-0345 is a low-severity vulnerability in Cisco Ios with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 1% (40th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Ios
- Published:
- Last modified:
Description
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
Frequently asked questions
- What is CVE-2000-0345?
- The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
- How severe is CVE-2000-0345?
- CVE-2000-0345 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2000-0345 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (40th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2000-0345?
- CVE-2000-0345 primarily affects Cisco Ios. In total, 54 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2000-0345?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2000-0345 published?
- CVE-2000-0345 was published on 2000-05-03 and last updated on 2026-06-16.
References
- http://www.securityfocus.com/bid/1161
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502222246.28423.qmail%40securityfocus.com
Affected products (54)
- cpe:2.3:o:cisco:ios:9.14:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(13\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(13\)aa:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(13\)ca:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(13\)ia:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(15\)ca:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(16\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(16\)aa:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(16\)ia:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(17\)cc:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.1\(17\)ct:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(4\)f1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(8\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(8\)p:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(8\)sa1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(8\)sa3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(8\)sa5:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(9\)p:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(9\)xa:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(10\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(10\)bc:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2\(17\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(1\)w:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(1\)xa3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(1\)xb:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(1\)xe:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(2\)xc:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(2\)xd:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(2\)xf:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(2\)xg:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(3\)t2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(4\)s:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(4\)t:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:12.0\(5\):*:*:*:*:*:*:*
More vulnerabilities in Cisco Ios
- CVE-2011-3271 — Critical (CVSS 10.0): Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to…
- CVE-2011-0935 — Critical (CVSS 10.0): The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which…
- CVE-2010-1574 — Critical (CVSS 10.0): IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of…
- CVE-2010-0581 — Critical (CVSS 10.0): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute…
- CVE-2010-0580 — Critical (CVSS 10.0): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute…
- CVE-2006-4950 — Critical (CVSS 10.0): Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices,…