← Vulnerability feed

Vulnerability record · CVE-2003-1001 · published 5 January 2004

CVE-2003-1001: Cisco catalyst 6500 vulnerability

Cisco · Catalyst 6500

Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.

5.0 CVSS 2.0 Medium EPSS 1.4% · top 29.0%
5.0CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
9Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

9 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml PatchVendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml PatchVendor Advisory

Track CVE-2003-1001 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-1257Cisco network analysis module improper input validation vulnerabilityThe Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNM…EPSS 6.8%9.0CVE-2012-4661Cisco adaptive security appliance software memory buffer overflow vulnerabilityStack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Mod…EPSS 4.0%7.9CVE-2011-3298Cisco adaptive security appliance software improper authentication vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 be…EPSS 0.86%7.8CVE-2012-4660Cisco adaptive security appliance software memory buffer overflow vulnerabilityThe SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500…EPSS 1.8%7.8CVE-2012-3058Cisco adaptive security appliance software vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with softwar…EPSS 2.0%7.8CVE-2012-0355Cisco adaptive security appliance software improper input validation vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with softwar…EPSS 2.7%7.8CVE-2012-0356Cisco firewall services module software improper input validation vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with softwar…EPSS 2.1%7.8CVE-2011-3296Cisco firewall services module software vulnerabilityCisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allow…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2003-1001), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.