CVE-2014-0650

Published Jan 16, 2014

Last updated 7 years ago

Overview

Description: The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.
Source: ykramarz@cisco.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DC3CDA24-DDE3-42D6-B2BA-14F85E5D1AD8",
            "versionEndIncluding": "5.4.0.46.2"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2CF8363-45D0-43C8-B7B9-3F6BC2234A30"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "07DE9E4E-2F14-4A31-AFC3-154B1844AE03"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "401107FC-A04B-4375-8C3C-33E7180EDA16"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE77C1EB-585A-453E-80C4-D5CE79A99B50"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E6BC5C61-A23C-4536-B659-75520AC5129C"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F31E15C-954C-47BF-A461-D4051ADAF1FF"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE8F7733-1E65-4D6C-91D0-6E0D56F1BD28"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "04BBADC0-EAAB-49D8-94B3-4DA6F308BD77"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2.0.26:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0BD85C33-787C-4495-A37F-842098361872"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2.0.26.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "09622F03-6BEB-483F-9A67-1E6F78536C61"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2.0.26.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1922B2DD-14C3-458E-9F41-46262B98EC60"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F48EBAF-7FFB-40BB-B4C0-706C89609752"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0DBFC6EA-4EE2-4BF7-A54B-F6E7C1BF9A1C"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6DC87D9B-818E-46AE-9F33-A00C3292D5FB"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A1D809F4-86DC-4681-9676-8CFA004BA520"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3D170305-A11C-423F-BECD-5AAF1557D3AD"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8DC868F0-4F2E-42CD-9D14-4755478720A0"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2A7AF15C-F403-4C70-BBE9-C27DF6D24D93"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F7EC6DB7-DB4C-4E47-928B-8BB6C665BD97"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "87CFC9B9-51EA-4BA9-98C2-FCBF32F22022"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.4.0.46.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "54058C70-3D37-45DB-BC81-402A2B1ECD7D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References