CVE-2014-0650

Published: Jan 16, 2014Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.

Affected (22)

Products: Cisco: Secure Access Control System

Cisco

1 product

Secure Access Control System

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Cisco Secure Access Control System	Up to 5.4.0.46.2
Cisco Secure Access Control System	Version 5.1.0.44.1
Cisco Secure Access Control System	Version 5.1.0.44.2
Cisco Secure Access Control System	Version 5.1.0.44.3
Cisco Secure Access Control System	Version 5.1.0.44.4
Cisco Secure Access Control System	Version 5.1.0.44.5
Cisco Secure Access Control System	Version 5.1.0.44
Cisco Secure Access Control System	Version 5.1
Cisco Secure Access Control System	Version 5.2.0.26.1
Cisco Secure Access Control System	Version 5.2.0.26.2
Cisco Secure Access Control System	Version 5.2.0.26
Cisco Secure Access Control System	Version 5.2
Cisco Secure Access Control System	Version 5.3.0.40.1
Cisco Secure Access Control System	Version 5.3.0.40.2
Cisco Secure Access Control System	Version 5.3.0.40.3
Cisco Secure Access Control System	Version 5.3.0.40.4
Cisco Secure Access Control System	Version 5.3.0.40.5
Cisco Secure Access Control System	Version 5.3.0.40.6
Cisco Secure Access Control System	Version 5.3.0.40.7
Cisco Secure Access Control System	Version 5.3.0.40.8
Cisco Secure Access Control System	Version 5.3.0.40.9
Cisco Secure Access Control System	Version 5.4.0.46.1