CVE-2006-0485 json
The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 do…
published 2006-02-01 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0492
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 29%
- public exploits
- 0
- none known
Summary
The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.
Exploit prediction
0.36% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Technology feeds
References
-
cisco.com
/warp/public/707/cisco-response-20060125-aaatcl.shtml
vendor-advisory
-
securitytracker.com
/id?1015543
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5836
vdb-entry, signature
-
osvdb.org
/34892
vdb-entry
-
secunia.com
/advisories/18613
third-party-advisory
-
vupen.com
/english/advisories/2006/0337
vdb-entry
-
securityfocus.com
/bid/16383
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24308
vdb-entry
Sources
- CVE List CVE-2006-0485
- NVD CVE-2006-0485
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.