AAA authentication on Cisco systems allows attackers to execute commands without authorization.
CVSS Metrics