Exam 312-49v10 topic 1 question 145 discussion

A. HTTP Configuration Arbitrary Administrative Access Vulnerability: Correct This vulnerability occurs when a Cisco router's HTTP service is improperly secured, allowing unauthorized access to configuration files through specific URLs. B. HTML Configuration Arbitrary Administrative Access Vulnerability: Incorrect This is a made-up term and does not describe a specific vulnerability. C. Cisco IOS Arbitrary Administrative Access Online Vulnerability: Incorrect While the vulnerability targets Cisco IOS, this term is not precise or widely recognized. D. URL Obfuscation Arbitrary Administrative Access Vulnerability: Incorrect The URL is not obfuscated, and this term does not accurately describe the issue.

Correct Answer is A according to the exploit Database

A > Cisco IOS 11.x/12.x - HTTP Configuration Arbitrary Administrative Access

Correct Answer: A: http://www.infosecpro.com/penetrationtest/p75.htm

Cisco IOS Arbitrary Administrative Access Online Vulnerability. The URL entered includes the IP address of the router and the command to show the configuration file, which can only be accessed by an authenticated user with administrative privileges. This vulnerability allows an attacker to bypass authentication and access sensitive information or perform unauthorized actions on the router.

Vulnerability Details : CVE-2001-0537 HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. Publish Date : 2001-07-21 Last Update Date : 2017-10-10 CVE-2001-0537 : HTTP server for Cisco IOS 11.3 to 12.2 ... www.cvedetails.com/cve/CVE-2001-0537/