CVE-2014-0650
highPriorität · verfolgen · 41EPSS 0.034 · 89. PerzentilEUUSgrimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
3.40% (89th) EPSS
CVSS 10 · high
Who says so?
3 sources
cnnvd · enisa_euvd · nvd
EPSS · bewertet 2026-10-28
The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.
01
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
10.0
010
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
02
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
03
betroffene Produkte (23)
Betroffene Produkte und Versionsbereiche.
- cisco secure access control system≤ 5.4.0.46.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.7nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
20 von 23 angezeigt
04
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
05
quellen
Welche Quellen diesen Datensatz belegen und wann.
07
Referenzen (16)
Externe Belege — Patches, Meldungen, Analysen.
- http://secunia.com/advisories/56213cnnvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacscnnvd
- http://osvdb.org/102115enisa_euvd
- http://secunia.com/advisories/56213enisa_euvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacsenisa_euvd
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32380enisa_euvd
- http://www.securityfocus.com/bid/64964enisa_euvd
- http://www.securitytracker.com/id/1029634enisa_euvd
scry
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan