PT-2017-3756 · Cisco · Cisco Secure Access Control System

Mikhail Klyuchnikov + 2 · Published 2017-06-01 · Updated 2019-10-09 · CVE-2018-0253

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Cisco Secure Access Control System (ACS) versions prior to 5.8 Patch 7

Description: A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. The issue is due to insufficient validation of the Action Message Format (AMF) protocol. An attacker could exploit this by sending a crafted AMF message that contains malicious code to a targeted user, allowing the execution of arbitrary commands on the ACS device.

Recommendations: For versions prior to 5.8 Patch 7, update to Release 5.8 Patch 7 or later to resolve the issue. As a temporary workaround, consider restricting access to the AMF protocol to minimize the risk of exploitation. Avoid using the AMF protocol until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-00313

CVE-2018-0253

Affected Products

Cisco Secure Access Control System

References · 9

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-acs1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00313 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0253 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0253 · Vendor Advisory
• http://securityfocus.com/bid/104075 · Note
• https://securityfocus.com/bid/104075 · Note
• https://ptsecurity.com/ru-ru/research/threatscape/pt-2018-27 · Note
• https://securitytracker.com/id/1040808 · Note
• http://securitytracker.com/id/1040808 · Note