312-49 · Question #454
You are a security analyst performing a penetration tests for a company in the Midwest. After some initial reconnaissance, you discover the IP addresses of some Cisco routers used by the company…
The correct answer is D. HTTP Configuration Arbitrary Administrative Access Vulnerability. This describes the HTTP Configuration Arbitrary Administrative Access Vulnerability in Cisco IOS. Certain older Cisco IOS versions had a flaw in their HTTP server implementation that allowed unauthenticated users to retrieve the full running configuration of the router by…
Question
You are a security analyst performing a penetration tests for a company in the Midwest. After some initial reconnaissance, you discover the IP addresses of some Cisco routers used by the company. You type in the following URL that includes the IP address of one of the routers:
After typing in this URL, you are presented with the entire configuration file for that router. What have you discovered?
Options
- AURL Obfuscation Arbitrary Administrative Access Vulnerability
- BHTML Configuration Arbitrary Administrative Access Vulnerability
- CCisco IOS Arbitrary Administrative Access Online Vulnerability
- DHTTP Configuration Arbitrary Administrative Access Vulnerability
How the community answered
(33 responses)- A3% (1)
- C3% (1)
- D94% (31)
Explanation
This describes the HTTP Configuration Arbitrary Administrative Access Vulnerability in Cisco IOS. Certain older Cisco IOS versions had a flaw in their HTTP server implementation that allowed unauthenticated users to retrieve the full running configuration of the router by sending a specially crafted HTTP request to the router's web management interface. By accessing a URL like http://<router-ip>/level/16/exec/show/config or similar paths, an attacker could bypass authentication and obtain the complete configuration - including passwords, ACLs, and network topology. This is catastrophic because the configuration reveals the entire network architecture and credentials. This vulnerability (CVE-2001-0537) is why router HTTP management interfaces should be disabled when not needed.
Topics
Community Discussion
No community discussion yet for this question.