Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. Commands executed by the attacker are processed at the targeted user's privilege level. The vulnerability is due to insufficient validation of the Action Message Format (AMF) protocol. An attacker could exploit this vulnerability by sending a crafted AMF message that contains malicious code to a targeted user. A successful exploit could allow the attacker to execute arbitrary commands on the ACS device. This vulnerability affects all releases of Cisco Secure ACS prior to Release 5.8 Patch 7. Cisco Bug IDs: CSCve69037.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Cisco Secure Access Control System ACS Report组件输入验证漏洞
Vulnerability Description
Cisco Secure Access Control System（ACS）是美国思科（Cisco）公司的一套安全访问控制系统。该系统可通过RADIUS、TACACS协议分别对网络访问和网络设备访问进行控制。ACS Report是其中的一个系统报告生成组件。 Cisco Secure ACS 5.8 Patch 7之前版本中的ACS Report组件存在输入验证漏洞，该漏洞源于Action Message Format (AMF)协议没有进行充分的校验。远程攻击者可通过发送带有恶意代码的特制AMF消息利
CVSS Information
N/A
Vulnerability Type
N/A