Design/Logic Flaw

2013-08-2912:07:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.5%

JSON

The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.

CPENameOperatorVersion
secure_access_control_servereq4.2.1.15.1
secure_access_control_servereq4.2.1.15.4
secure_access_control_servereq4.2.1.15.3
secure_access_control_servereq4.2.1.15.0
secure_access_control_servereq4.2.1.15.6
secure_access_control_serverle4.2.1.15.10
secure_access_control_servereq4.2.1.15.7
secure_access_control_servereq4.2.1.15.8
secure_access_control_servereq4.2.1.15.9
secure_access_control_servereq4.2.1.15.2

Name	Operator	Version
secure_access_control_server	eq	4.2.1.15.1
secure_access_control_server	eq	4.2.1.15.4
secure_access_control_server	eq	4.2.1.15.3
secure_access_control_server	eq	4.2.1.15.0
secure_access_control_server	eq	4.2.1.15.6
secure_access_control_server	le	4.2.1.15.10
secure_access_control_server	eq	4.2.1.15.7
secure_access_control_server	eq	4.2.1.15.8
secure_access_control_server	eq	4.2.1.15.9
secure_access_control_server	eq	4.2.1.15.2