VULNERABILITY INTELLIGENCE

CVE-2014-0648

CVSS score10 HIGH
EPSS probability5.93%
CISA KEVNot currently listed
Published2014-01-16
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.

Primary references