Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Successful Shell Attack Detected - Cisco 'show access-list' Command

High

Synopsis

The results of a Cisco IOS command occurred in a TCP session normally used for a standard service.

Description

The results of a Cisco IOS command occurred in a TCP session normally used for a standard service. This may indicate that a successful compromise of the router or switch has occurred.

Solution

The command activity observed is indicative of a possible compromise. Consider performing a full audit of the system to investigate further.