CVE-2006-0486 json
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains re…
published 2006-02-01 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0493
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 33%
- public exploits
- 0
- none known
Summary
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may cause subsequent local users to execute unintended commands or bypass AAA command authorization checks, aka Bug ID CSCef77770.
Exploit prediction
0.39% chance of exploitation in the next 30 days, higher than 33% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Technology feeds
References
-
cisco.com
/warp/public/707/cisco-response-20060125-aaatcl.shtml
vendor-advisory
-
securitytracker.com
/id?1015543
vdb-entry
-
secunia.com
/advisories/18613
third-party-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4905
vdb-entry, signature
-
osvdb.org
/22723
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24308
vdb-entry
Sources
- CVE List CVE-2006-0486
- NVD CVE-2006-0486
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.