NVD

Id
29534  
Name
CVE-2014-0650  
Description
The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-01-16  
Modified Date
2016-09-16  
Seq
2014-0650  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156493 29534 CVE-2014-0650 20140115 Multiple Vulnerabilities in Cisco Secure Access Control System  View
156494 29534 CVE-2014-0650 http://tools.cisco.com/security/center/viewAlert.x?alertId=32380  View
156495 29534 CVE-2014-0650 64964  View
156496 29534 CVE-2014-0650 1029634  View
156497 29534 CVE-2014-0650 cisco-acs-cve20140650-command-exec(90432)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12316 JVNDB-2014-001191 Cisco Secure Access Control System の Web インターフェースにおける任意のオペレーティングシステムコマンドを実行される脆弱性 Cisco Secure Access Control System (ACS) の Web インターフェースには、任意のオペレーティングシステムコマンドを実行される脆弱性が存在します。 CVE-2014-0650 68051 CVE-2014-0650 29534 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001191.html 2014-01-15 2014-01-20 View