CVEvulnerability

CVE-2014-0650

10.0 HIGH Published 2014-01-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.

Affected configurations

• cisco secure access control system (<= 5.4.0.46.2) • cisco secure access control system 5.1 • cisco secure access control system 5.1.0.44 • cisco secure access control system 5.1.0.44.1 • cisco secure access control system 5.1.0.44.2 • cisco secure access control system 5.1.0.44.3 • cisco secure access control system 5.1.0.44.4 • cisco secure access control system 5.1.0.44.5 • cisco secure access control system 5.2 • cisco secure access control system 5.2.0.26 • cisco secure access control system 5.2.0.26.1 • cisco secure access control system 5.2.0.26.2 • cisco secure access control system 5.3.0.40.1 • cisco secure access control system 5.3.0.40.2 • cisco secure access control system 5.3.0.40.3 • cisco secure access control system 5.3.0.40.4 • cisco secure access control system 5.3.0.40.5 • cisco secure access control system 5.3.0.40.6 • cisco secure access control system 5.3.0.40.7 • cisco secure access control system 5.3.0.40.8 • cisco secure access control system 5.3.0.40.9 • cisco secure access control system 5.4.0.46.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References