CVE-2013-5470

Cisco Secure Access Control System - Denial of Service via Malformed TACACS+ TCP Packets

Title source: llm
STIX 2.1

Description

Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service (process crash) via malformed TCP packets, aka Bug ID CSCuh12488.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/96822
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/62145

Scores

EPSS 0.0186
EPSS Percentile 76.7%

Details

CWE
CWE-20
Status published
Products (1)
cisco/secure_access_control_system
Published Sep 04, 2013
Tracked Since Feb 18, 2026