PT-2009-3263 · Cisco · Cisco Ace Application Control Engine Module+3

Published 2009-02-26 · Updated 2009-02-27 · CVE-2009-0622

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers versions prior to A2(1.2) Cisco ACE 4710 Application Control Engine Appliance versions prior to A1(8a)

Description The issue allows remote authenticated users to execute arbitrary operating-system commands through a command line interface (CLI).

Recommendations For Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers versions prior to A2(1.2), update to version A2(1.2) or later. For Cisco ACE 4710 Application Control Engine Appliance versions prior to A1(8a), update to version A1(8a) or later.

Fix

Related Identifiers

CVE-2009-0622

Affected Products

7600 Routers

Catalyst 6500 Switches

Cisco Ace 4710 Application Control Engine Appliance

Cisco Ace Application Control Engine Module

References · 4

• http://cisco.com/en/US/products/products_security_advisory09186a0080a7bc82.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0622 · Security Note
• http://securityfocus.com/bid/33900 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0622 · Note