Cisco Security Advisory – The default Cisco IOS configuration shipped with the Cisco Router Web Setup (CRWS) application allows the execution of commands at privilege level 15 through the Cisco IOS HTTP (Hypertext Transfer Protocol) server web interface without requiring authentication credentials. Privilege level 15 is the highest privilege level on Cisco IOS devices. Cisco routers whose configurations have been based on the default IOS configuration shipped with any version of CRWS prior to version 3.3.0 build 31 may be affected by this vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48234/cisco-sa-20060712-crws.txt
Source: https://packetstormsecurity.com/files/48234/Cisco-Security-Advisory-20060712-crws.html