CVE-2003-0512

Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote…

published July 29, 2003

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03202 · 88.0th percentile
Published
2003-07-29T04:00Z
EPSS history
Timeline
  • 29 JUL 04:00Z
    Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote…
    cvelistv5