CVE-2001-0350

CVE-2001-0350 describes a vulnerability in the Microsoft Windows 2000 Telnet service where it creates named pipes with predictable names. This flaw allows a local attacker to execute arbitrary commands by creating a malicious named pipe with the expected name and associating it with a program of their choice. The vulnerability has a CVSS score of 4.6 (Medium), indicating a local attack vector with low attack complexity, and potential for partial confidentiality, integrity, and availability impact. Its EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also non-existent, aligning with the typical low attention for older, less severe vulnerabilities.