CVE-2014-0648

Published: Jan 16, 2014Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.

Affected (26)

Products: Cisco: Secure Access Control System

Cisco

1 product

Secure Access Control System

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Cisco Secure Access Control System	Up to 5.4.0.46.6
Cisco Secure Access Control System	Version 5.1.0.44.1
Cisco Secure Access Control System	Version 5.1.0.44.2
Cisco Secure Access Control System	Version 5.1.0.44.3
Cisco Secure Access Control System	Version 5.1.0.44.4
Cisco Secure Access Control System	Version 5.1.0.44.5
Cisco Secure Access Control System	Version 5.1.0.44
Cisco Secure Access Control System	Version 5.1
Cisco Secure Access Control System	Version 5.2.0.26.1
Cisco Secure Access Control System	Version 5.2.0.26.2
Cisco Secure Access Control System	Version 5.2.0.26
Cisco Secure Access Control System	Version 5.2
Cisco Secure Access Control System	Version 5.3.0.40.1
Cisco Secure Access Control System	Version 5.3.0.40.2
Cisco Secure Access Control System	Version 5.3.0.40.3
Cisco Secure Access Control System	Version 5.3.0.40.4
Cisco Secure Access Control System	Version 5.3.0.40.5
Cisco Secure Access Control System	Version 5.3.0.40.6
Cisco Secure Access Control System	Version 5.3.0.40.7
Cisco Secure Access Control System	Version 5.3.0.40.8
Cisco Secure Access Control System	Version 5.3.0.40.9
Cisco Secure Access Control System	Version 5.4.0.46.1
Cisco Secure Access Control System	Version 5.4.0.46.2
Cisco Secure Access Control System	Version 5.4.0.46.3
Cisco Secure Access Control System	Version 5.4.0.46.4
Cisco Secure Access Control System	Version 5.4.0.46.5