CVE-2003-0512: Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when a...

Security readout for executives and security teams

This issue lets a remote party distinguish valid from invalid local usernames on affected Cisco IOS systems because the login flow responds differently. By itself it is information disclosure, but it can make password guessing against network equipment more efficient. Exposure is most relevant where Cisco IOS 12.2 or earlier devices have remote management login reachable. The bundle specifically notes the issue was reported for the Aironet Bridge, but does not provide complete CPE coverage. Treat this as a credential-risk amplifier for legacy network infrastructure. Prioritize externally reachable or high-privilege management devices, but avoid emergency escalation unless local exposure or active guessing is observed. Mitigation focus: Review Cisco’s advisory for supported fixes or configuration guidance.; Restrict device management access to trusted administrative networks.; Disable unnecessary remote management paths where operationally feasible..

Prepared

Jun 30, 2026, 09:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.