CVE-2018-0147

Produto

Cisco / Secure Access Control System (ACS)

Vulnerabilidade

Cisco Secure Access Control System Java Deserialization Vulnerability

Adicionado ao KEV

25 de mar. de 2022

Corrigir até

15 de abr. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2018-0147