CVE-2001-1065: Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself...

Security readout for executives and security teams

Some Cisco 600 series routers could keep their web configuration listener active on port 80 even when administrators believed web configuration was disabled. That mismatch can create unexpected management exposure, especially if the router is reachable from untrusted networks. Exposure is likely limited to legacy Cisco 600 series routers using CBOS 2.0.1 through 2.4.2ap, particularly where port 80 is reachable from the internet, partner networks, or broad internal segments. Treat this as a legacy exposure cleanup item unless affected routers are internet reachable. Internet-facing or broadly reachable management interfaces should be prioritized because administrators may falsely believe web configuration is disabled. Mitigation focus: Identify any Cisco 600 series routers still in service.; Check Cisco's advisory for supported fixes or replacement guidance.; Restrict router management access to trusted administrative networks..

Prepared

Jul 1, 2026, 08:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.