CVE-2014-0650: Cisco Secure Access Control System

High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days.

The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.

Affected products

• Cisco Secure Access Control System: up to and including 5.4.0.46.2; version 5.1 only; version 5.1.0.44 only; version 5.1.0.44.1 only; version 5.1.0.44.2 only; version 5.1.0.44.3 only; …

Published 2014-01-16. Last modified 2026-06-17.