CVE-2004-1458: Cisco Secure Access Control Server

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.

Affected products

• Cisco Secure Access Control Server: version 3.0 only; version 3.1 only; version 3.2 only; version 3.2(1) only; version 3.2(2) only; version 3.2(3) only; …
• Cisco Secure ACS Solution Engine: any version

Published 2004-12-31. Last modified 2026-06-16.