CVE-2014-0650

CRITICAL 10.0CVE-2014-0650 · Published 16/01/2014 · updated 17/06/2026

In short

CVE-2014-0650 is a CRITICAL (CVSS 10.0) vulnerability affecting secure access control system (cisco).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
secure access control system cisco	`= 5.1= 5.1.0.44= 5.1.0.44.1= 5.1.0.44.2= 5.1.0.44.3= 5.1.0.44.4= 5.1.0.44.5= 5.2= 5.2.0.26= 5.2.0.26.1= 5.2.0.26.2= 5.3.0.40.1= 5.3.0.40.2= 5.3.0.40.3= 5.3.0.40.4= 5.3.0.40.5= 5.3.0.40.6= 5.3.0.40.7= 5.3.0.40.8= 5.3.0.40.9= 5.4.0.46.1≤ 5.4.0.46.2`	No fix yet

Description

The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.

References

osvdb.org/102115
secunia.com/advisories/56213
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs · Vendor Advisory
tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/64964 · Third Party Advisory
securitytracker.com/id/1029634 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/90432

More vulnerabilities in secure access control system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

secure access control system

cisco

= 5.1= 5.1.0.44= 5.1.0.44.1= 5.1.0.44.2= 5.1.0.44.3= 5.1.0.44.4= 5.1.0.44.5= 5.2= 5.2.0.26= 5.2.0.26.1= 5.2.0.26.2= 5.3.0.40.1= 5.3.0.40.2= 5.3.0.40.3= 5.3.0.40.4= 5.3.0.40.5= 5.3.0.40.6= 5.3.0.40.7= 5.3.0.40.8= 5.3.0.40.9= 5.4.0.46.1≤ 5.4.0.46.2

No fix yet

More vulnerabilities in secure access control system

See all →