CVE-2014-0650
highpriority · track · 41EPSS 0.034 · 89 %ileEUUSgrimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
3.40% (89th) EPSS
CVSS 10 · high
Who says so?
3 sources
cnnvd · enisa_euvd · nvd
EPSS · scored 2026-10-28
The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.
01
cvss
Technical severity, 0–10. One row per scoring source.
10.0
010
base score 0–10 · higher = more severe · hover a vector to decode
02
weaknesses
The CWE weakness classes this flaw belongs to.
03
affected products (23)
Products and version ranges known to be affected.
- cisco secure access control system≤ 5.4.0.46.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.1.0.44.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.2.0.26.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.1nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.2nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.3nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.4nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.5nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.6nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
- cisco secure access control system= 5.3.0.40.7nvdUScpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*
showing 20 of 23
04
also known as (3)
Other names and identifiers for this entity.
05
sources
Which sources assert this record, and when.
07
references (16)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/56213cnnvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacscnnvd
- http://osvdb.org/102115enisa_euvd
- http://secunia.com/advisories/56213enisa_euvd
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacsenisa_euvd
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32380enisa_euvd
- http://www.securityfocus.com/bid/64964enisa_euvd
- http://www.securitytracker.com/id/1029634enisa_euvd
scry
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan