PT-2014-3745

CVE-2014-0650

Published

2014-01-16

Updated

2017-08-29

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System (ACS) versions 5.x before 5.4 Patch 3

Description The issue allows remote attackers to execute arbitrary operating-system commands via a request to the web interface.

Recommendations For versions 5.x before 5.4 Patch 3, apply Patch 3 to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾