Lucene search

K
cveCiscoCVE-2008-1157
HistoryMar 14, 2008 - 8:44 p.m.

CVE-2008-1157

2008-03-1420:44:00
CWE-20
cisco
web.nvd.nist.gov
24
cisco
ipm
remote execution
vulnerability
cve-2008-1157

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.013

Percentile

86.2%

Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.

Affected configurations

Nvd
Node
ciscociscoworks_internetwork_performance_monitorMatch2.6
VendorProductVersionCPE
ciscociscoworks_internetwork_performance_monitor2.6cpe:2.3:a:cisco:ciscoworks_internetwork_performance_monitor:2.6:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.013

Percentile

86.2%