CVE-2014-0649
highpriority · track · 37EPSS 0.026 · 86 %ileEUUSEPSS · scored 2026-10-28
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (27)
Products and version ranges known to be affected.
- cisco secure access control system≤ 5.4.0.46.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.7nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (16)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/56213cnnvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacscnnvd
- http://osvdb.org/102116enisa_euvd
- http://secunia.com/advisories/56213enisa_euvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacsenisa_euvd
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32378enisa_euvd
- http://www.securityfocus.com/bid/64958enisa_euvd
- http://www.securitytracker.com/id/1029634enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan