Executive brief
A vulnerability in Cisco networking equipment allows unauthorized individuals to execute commands on the system. This affects the Authentication, Authorization, and Accounting (AAA) framework, which is responsible for controlling who can access the device and what they can do. An attacker could exploit this to gain control over the network hardware, potentially leading to data interception or service disruptions.
Technical details
A vulnerability exists within the Authentication, Authorization, and Accounting (AAA) framework of Cisco IOS. The flaw allows a remote attacker to bypass intended security restrictions and execute arbitrary commands without valid authorization. The root cause is an improper implementation or enforcement of AAA protocols, which fails to correctly validate user permissions before granting command execution access. An attacker can exploit this over the network without requiring prior authentication. This can result in a complete compromise of the affected networking device.
Affected products
- Cisco IOS
Timeline
- 1998-01-01: advisory: NVD Published Date