CyberSec.Space Logo
Back to CVE Browser

CVE-2008-1157

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0380%
EPSS Percentile37.77th
PublishedMar 14, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.

Affected Platforms (CPE)

📦
Cisco

Ciscoworks Internetwork Performance Monitor

= 2.6

References & Advisories

🔗 http://secunia.com/advisories/29376
🔗 http://www.cisco.com/warp/public/707/cisco-sa-20080313-ipm.shtml
🔗 http://www.securityfocus.com/bid/28249
🔗 http://www.securitytracker.com/id?1019611
🔗 http://www.vupen.com/english/advisories/2008/0876/references
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41208
🔗 http://secunia.com/advisories/29376
🔗 http://www.cisco.com/warp/public/707/cisco-sa-20080313-ipm.shtml

Related Vulnerabilities

CVE-2010-013810.0

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWork...

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...