2022-09-08 13:28:46 +00:00
id : disable-ip-source-route
info :
2023-07-06 05:19:46 +00:00
name : Cisco Disable IP Source-Route - Detect
2022-09-08 13:28:46 +00:00
author : pussycat0x
severity : info
description : |
2023-10-14 11:27:55 +00:00
Cisco IP source-route functionality has been utilized in several attacks. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized operations.
2023-05-03 21:35:50 +00:00
remediation : Disable IP source-route where appropriate.
2022-09-08 13:28:46 +00:00
reference :
- https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr/command/ipaddr-cr-book/ipaddr-i4.html#GUID-C7F971DD-358F-4B43-9F3E-244F5D4A3A93
2023-05-03 21:35:50 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
2023-10-14 11:27:55 +00:00
cvss-score : 0
2023-05-03 21:35:50 +00:00
cwe-id : CWE-200
2023-04-14 14:25:41 +00:00
tags : cisco,config-audit,cisco-switch,file,router
2023-12-14 03:48:19 +00:00
2022-09-08 13:28:46 +00:00
file :
- extensions :
- conf
matchers-condition : and
matchers :
- type : word
words :
- "no ip source-route"
negative : true
- type : word
words :
2023-04-14 14:25:41 +00:00
- "configure terminal"
2023-10-20 11:41:13 +00:00
# digest: 4a0a00473045022074c0a1cf8e4aa1aae86601df3d56f2d8a24cbdfd644ff047cfb34ed4c79397080221009b5f95e3a473009298bb7cf875d282617fb93ad30dafc9c3f2efcba049e672ea:922c64590222798bb761d5b6d8e72950
