CVE-2014-0650
16.01.2014, 19:55
The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | secure_access_control_system | 𝑥 ≤ 5.4.0.46.2 |
| cisco | secure_access_control_system | 5.1 |
| cisco | secure_access_control_system | 5.1.0.44 |
| cisco | secure_access_control_system | 5.1.0.44.1 |
| cisco | secure_access_control_system | 5.1.0.44.2 |
| cisco | secure_access_control_system | 5.1.0.44.3 |
| cisco | secure_access_control_system | 5.1.0.44.4 |
| cisco | secure_access_control_system | 5.1.0.44.5 |
| cisco | secure_access_control_system | 5.2 |
| cisco | secure_access_control_system | 5.2.0.26 |
| cisco | secure_access_control_system | 5.2.0.26.1 |
| cisco | secure_access_control_system | 5.2.0.26.2 |
| cisco | secure_access_control_system | 5.3.0.40.1 |
| cisco | secure_access_control_system | 5.3.0.40.2 |
| cisco | secure_access_control_system | 5.3.0.40.3 |
| cisco | secure_access_control_system | 5.3.0.40.4 |
| cisco | secure_access_control_system | 5.3.0.40.5 |
| cisco | secure_access_control_system | 5.3.0.40.6 |
| cisco | secure_access_control_system | 5.3.0.40.7 |
| cisco | secure_access_control_system | 5.3.0.40.8 |
| cisco | secure_access_control_system | 5.3.0.40.9 |
| cisco | secure_access_control_system | 5.4.0.46.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References