CVE-2016-1297: Improper Neutralization of Special Elements used in an OS Command

The Device Manager GUI in Cisco Application Control Engine ACE 4710 A5 before A53.1 allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801...

PT-2016-4690

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine ACE 4710 A5 versions prior to A53.1 Description The issue allows remote authenticated users to bypass intended Role-Based Access Control RBAC restrictions. This is achieved by executing arbitrary Command-Line...

CVE-2015-6265: Undefined Security Weakness

The CLI in Cisco Application Control Engine ACE 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662...

PT-2015-7144

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine ACE 4700 A5 versions 3.0 and earlier Description The issue allows local users to bypass intended access restrictions and read or write to files by entering an unspecified CLI command with a crafted file as this...

PT-2012-5071

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine ACE module version 3.0 Description The issue is related to improper monitoring of Load Balancer LB queues, which can be exploited by remote attackers to cause a denial of service. This can result in incorrect...

CVE-2012-3919: Undefined Security Weakness

The Cisco Application Control Engine ACE module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer LB queues, which allows remote attackers to cause a denial of service incorrect memory access and module reboot via application traffic, aka Bug ID CSCtw70879...

PT-2012-4464

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine ACE versions before A42.3 Cisco Application Control Engine ACE versions before A51.1 Description The issue allows remote authenticated administrators to bypass intended access restrictions and read or modify...

CVE-2012-3063: Concurrent Execution using Shared Resource with Improper Synchronization

Cisco Application Control Engine ACE before A42.3 and A5 before A51.1, when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances...

CVE-2010-2824: Undefined Security Weakness

Unspecified vulnerability on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service device reload via a sequence of...

CVE-2010-2823: Undefined Security Weakness

Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine ACE 4710 appliance with software before A32.6 allows remote attackers to cause a denial of service device reload via crafted HTTP packets, related to HTTP, RTSP, and SIP inspection, aka Bug ID...

CVE-2010-2822: Undefined Security Weakness

Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine ACE Module with software before A23.2 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710 appliance with software before A32.6, allows remote...

CVE-2010-2825: Undefined Security Weakness

Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710...

CVE-2009-0615: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Application Networking Manager ANM before 2.0 and Application Control Engine ACE Device Manager before A32.1 allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."...