CVE-2014-0648
highpriority · track · 42EPSS 0.059 · 93 %ileEUUSEPSS · scored 2026-10-28
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (27)
Products and version ranges known to be affected.
- cisco secure access control system≤ 5.4.0.46.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.7nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (16)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/56213cnnvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacscnnvd
- http://osvdb.org/102117enisa_euvd
- http://secunia.com/advisories/56213enisa_euvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacsenisa_euvd
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32379enisa_euvd
- http://www.securityfocus.com/bid/64962enisa_euvd
- http://www.securitytracker.com/id/1029634enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan