CVE-2013-3466
29.08.2013, 12:07
The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | secure_access_control_server | 𝑥 ≤ 4.2.1.15.10 |
| cisco | secure_access_control_server | 4.2.1.15.0 |
| cisco | secure_access_control_server | 4.2.1.15.1 |
| cisco | secure_access_control_server | 4.2.1.15.2 |
| cisco | secure_access_control_server | 4.2.1.15.3 |
| cisco | secure_access_control_server | 4.2.1.15.4 |
| cisco | secure_access_control_server | 4.2.1.15.6 |
| cisco | secure_access_control_server | 4.2.1.15.7 |
| cisco | secure_access_control_server | 4.2.1.15.8 |
| cisco | secure_access_control_server | 4.2.1.15.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References