« Volver al listado

CVE-2014-0650

Estado: ModificadaAlta (10)—

The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Secure Access Control System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0650",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-16T19:55:04.700",
  "references": [
    {
      "url": "http://osvdb.org/102115",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/56213",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32380",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/64964",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1029634",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90432",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/102115",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/56213",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140115-csacs",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32380",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/64964",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1029634",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90432",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962."
    },
    {
      "lang": "es",
      "value": "La interfaz web de Cisco Secure Access Control System (ACS) 5.x anterior a 5.4 Patch 3 permite a atacantes remotos ejecutar en el sistema operativo  comandos arbitrarios a través de una solicitud a esta interfaz, también conocido como Bug ID CSCue65962."
    }
  ],
  "lastModified": "2026-06-17T00:03:26.003",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DC3CDA24-DDE3-42D6-B2BA-14F85E5D1AD8",
              "versionEndIncluding": "5.4.0.46.2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2CF8363-45D0-43C8-B7B9-3F6BC2234A30"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07DE9E4E-2F14-4A31-AFC3-154B1844AE03"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "401107FC-A04B-4375-8C3C-33E7180EDA16"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE77C1EB-585A-453E-80C4-D5CE79A99B50"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6BC5C61-A23C-4536-B659-75520AC5129C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F31E15C-954C-47BF-A461-D4051ADAF1FF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.1.0.44.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE8F7733-1E65-4D6C-91D0-6E0D56F1BD28"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04BBADC0-EAAB-49D8-94B3-4DA6F308BD77"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2.0.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BD85C33-787C-4495-A37F-842098361872"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2.0.26.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09622F03-6BEB-483F-9A67-1E6F78536C61"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.2.0.26.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1922B2DD-14C3-458E-9F41-46262B98EC60"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F48EBAF-7FFB-40BB-B4C0-706C89609752"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DBFC6EA-4EE2-4BF7-A54B-F6E7C1BF9A1C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DC87D9B-818E-46AE-9F33-A00C3292D5FB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1D809F4-86DC-4681-9676-8CFA004BA520"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D170305-A11C-423F-BECD-5AAF1557D3AD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DC868F0-4F2E-42CD-9D14-4755478720A0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A7AF15C-F403-4C70-BBE9-C27DF6D24D93"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7EC6DB7-DB4C-4E47-928B-8BB6C665BD97"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.3.0.40.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87CFC9B9-51EA-4BA9-98C2-FCBF32F22022"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_access_control_system:5.4.0.46.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54058C70-3D37-45DB-BC81-402A2B1ECD7D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}