Compliance Node Overview
MITRE ATT&CK T1059.008 (Network Device CLI) is an Enterprise Execution sub-technique of T1059 (Command and Scripting Interpreter). Adversaries may abuse scripting or built-in command line interpreters (CLI) on network devices to execute malicious command and payloads. The CLI is the primary means through which users and administrators interact with the device in order to view system information, modify device operations, or perform diagnostic and administrative functions. CLIs typically contain various permission levels required for different commands. Affected platforms: Network. MITRE-documented mitigations include M1038 Execution Prevention, M1026 Privileged Account Management, M1018 User Account Management. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-05, AC-06, AC-17, CA-07, CM-02, CM-05.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1059/008/
SHA-256 integrity: d6717ed02a9fb83c838f4f48349194d37e29ed2be0dbe8c5b4006709bf86c4b5
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1059.008: Network Device CLI (https://attack.mitre.org/techniques/T1059/008/)
- MITRE ATT&CK Tactic TA0002: Execution (https://attack.mitre.org/tactics/TA0002/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access