CVE-2008-1157: Cisco Ciscoworks Internetwork Performance Monitor

High severity, CVSS 10.0. EPSS: 20.7% chance of exploitation in the next 30 days.

Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands.

Affected products

• Cisco Ciscoworks Internetwork Performance Monitor: version 2.6 only

Published 2008-03-14. Last modified 2026-06-16.