Cisco Application Control Engine Software vulnerabilities

2 CVEs affecting Cisco Application Control Engine Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1297, published 2016-02-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1297, published 2016-02-26. High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days. The Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with…
CVE-2012-3063, published 2012-06-20. High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days. Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows…