Cisco IOS XE Web UI has a vulnerability that allows a remote attacker to create a local user and password on his target, without authentication. This can be used for further exploitation.
The Stormhield Network Security (SNS) appliance protects you from that attack, thanks to a dedicated IPS signature
ID | Name |
http:mix.354 | Exploitation of a privilege escalation on a Cisco IOS XE |