CVE-2014-0649: Cisco Secure Access Control System

High severity, CVSS 9.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.

Affected products

• Cisco Secure Access Control System: up to and including 5.4.0.46.6; version 5.1 only; version 5.1.0.44 only; version 5.1.0.44.1 only; version 5.1.0.44.2 only; version 5.1.0.44.3 only; …

Published 2014-01-16. Last modified 2026-06-17.