CVE-2008-0532: Cisco ACS For Windows

High severity, CVSS 10.0. EPSS: 57.1% chance of exploitation in the next 30 days.

Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after the Logout argument, and possibly unspecified other vectors.

Affected products

• Cisco ACS For Windows: any version
• Cisco ACS Solution Engine: any version
• Cisco User Changeable Password: version 4.1 only

Published 2008-03-14. Last modified 2026-06-16.