CVE-2009-0742

The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information...

CVE-2013-1202

Cisco ACE A23.6 allows log retention DoS...

Design/Logic Flaw

Cisco ACE A23.6 allows log retention DoS...

CVE-2013-1202

Cisco ACE A23.6 allows log retention DoS...

CVE-2013-1202

Cisco ACE A23.6 allows log retention DoS...

CVE-2013-1202: Undefined Security Weakness

Cisco ACE A23.6 allows log retention DoS...

PT-2020-7339

Name of the Vulnerable Software and Affected Versions: Cisco ACE version A23.6 Description: The issue allows for a denial of service DoS related to log retention. Recommendations: For Cisco ACE version A23.6, at the moment, there is no information about a newer version that contains a fix for thi...

Cisco ACE 4710 Application Control Engine Denial of Service Vulnerability

A vulnerability in the SSL/TLS functions of the Cisco ACE 4700 Series Application Control Engine Appliances could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

PT-2016-6875

Name of the Vulnerable Software and Affected Versions Cisco ACE30 Application Control Engine Module versions through A5 3.3 Cisco ACE 4700 Application Control Engine appliances versions through A5 3.3 Description The issue allows remote attackers to cause a denial of service, resulting in a devic...

CVE-2016-6399: Improper Input Validation

Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service device reload via crafted 1 SSL or 2 TLS packets, aka Bug ID CSCvb16317...

Vulnerability of Cisco ACE software, which allows a malicious actor to intercept sessions

The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...

Cisco ACE 4710 Appliance / ACE30 Module Multiple Vulnerabilities (Logjam)

The Cisco Application Control Engine ACE software installed on the remote Cisco ACE 4710 device or ACE30 module is version A5 prior to A53.3. It is, therefore, affected by multiple vulnerabilities : - An invalid free memory error exists due to improper validation of user-supplied input when a DTL...

Cisco ACE 4710 Device Manager GUI Remote Command Injection Vulnerability (cisco-sa-20160224-ace)

The Cisco Application Control Engine ACE software installed on the remote Cisco ACE 4710 device is an A5 version prior to A53.0. It is, therefore, affected by a remote command injection vulnerability in the device manager GUI due to improper validation of user-supplied input in HTTP POST requests...

CVE-2016-1297

The Device Manager GUI in Cisco Application Control Engine ACE 4710 A5 before A53.1 allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801...

Cisco ACE 4710 Application Control Engine Command Injection Vulnerability

Cisco ACE 4710 Application Control Engine is the United States Cisco Cisco a set of ACE application switch series and used to increase the security and stability of data center applications load balancing and application delivery solutions. A command injection vulnerability exists in the Cisco AC...

CVE-2015-6265

The CLI in Cisco Application Control Engine ACE 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662...

Cisco Application Control Engine GNU glibc gethostbyname Function Buffer Overflow Vulnerability (cisco-sa-20150128-ghost) (GHOST)

The Cisco Application Control Engine ACE software installed on the remote Cisco IOS device is version A23.6d or A53.1b. It is, therefore, affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validating user-supplied input to the nsshostnamedigitsdots...

Cisco ACE XML Gateway <= 6.0 Internal IP disclosure

No description provided by source...

Cisco Unsupported ACE Module Detection

According to its version, the Cisco Application Control Engine ACE module installed on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C...

Cisco ACE Log Retention Denial of Service Vulnerability

A vulnerability in the SSL logging daemon of Cisco Application Control Engine ACE could allow an unauthenticated, remote attacker to cause a denial of service condition on the affected device. The vulnerability occurs because the Cisco ACE fails to rotate logs from SSL sessions, exhausting the ha...