Unrated
Cisco Secure Access Control System Java Deserialization Vulnerability
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. CISA required action: Apply updates per vendor instructions.
Announced Source revision 1
Original source ↗CVE-2018-0147
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: kev:CVE-2018-0147
Secure Access Control System (ACS)
Source reference: /product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2018-0147
Source reference:
/cveID
Publisher severity
No explicit severity was provided.
- Event
- #2716 · Revision 1
- Added to Heist Feed
- Publisher date