Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11, and 4.2.x before 4.2(0) Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users to cause a denial of service (CSRadius and CSAuth service crash) or possibly execute arbitrary code via a crafted RADIUS (1) EAP-Response/Identity, (2) EAP-Response/MD5, or (3) EAP-Response/TLS Message Attribute packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Secure ACS EAP响应报文解析拒绝服务漏洞
Vulnerability Description
Cisco Secure ACS是Cisco网络设备的中央管理平台，用于控制设备的认证和授权。 Cisco Secure ACS没有正确地解析EAP-Response报文的长度，扮演为RADIUS客户端的远程攻击者可以发送包含有超长长度字符的EAP响应报文导致CSRadius服务崩溃。
CVSS Information
N/A
Vulnerability Type
N/A