CVE-2014-0648
highPriorität · verfolgen · 42EPSS 0.059 · 93. PerzentilEUUSEPSS · bewertet 2026-10-28
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (27)
Betroffene Produkte und Versionsbereiche.
- cisco secure access control system≤ 5.4.0.46.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.7nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (16)
Externe Belege — Patches, Meldungen, Analysen.
- http://secunia.com/advisories/56213cnnvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacscnnvd
- http://osvdb.org/102117enisa_euvd
- http://secunia.com/advisories/56213enisa_euvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacsenisa_euvd
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32379enisa_euvd
- http://www.securityfocus.com/bid/64962enisa_euvd
- http://www.securitytracker.com/id/1029634enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan