Detections
Analytics

Cisco Secure Access Control Multiple Vulnerabilities (cisco-sa-20180307-acs1 / cisco-sa-20180307-acs2)

critical Nessus Plugin ID 108406

Language:

Synopsis

The remote host is missing a vendor-supplied security patch.

Description

The version of Cisco Secure Access Control System (ACS) running on the remote host is prior to 5.8.0.32.9 Cumulative Patch. It is, therefore, affected by multiple vulnerabilities.

Solution

Upgrade to version 5.8.0.32.9 Cumulative Patch or later.

See Also

http://www.nessus.org/u?e98b9cb0

http://www.nessus.org/u?41f35c0f

Plugin Details

Severity: Critical

ID: 108406

File Name: cisco-sa-20180307-acs2.nasl

Version: 1.5

Type: local

Family: CISCO

Published: 3/16/2018

Updated: 4/25/2023

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2018-0147

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:cisco:secure_access_control_system

Required KB Items: Host/Cisco/ACS/Version, Host/Cisco/ACS/DisplayVersion

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/7/2018

Vulnerability Publication Date: 3/7/2018

CISA Known Exploited Vulnerability Due Dates: 4/15/2022

Reference Information

CVE: CVE-2018-0147, CVE-2018-0218

BID: 103328, 103345

CISCO-SA: cisco-sa-20180307-acs1, cisco-sa-20180307-acs2

IAVA: 2018-A-0084

CISCO-BUG-ID: CSCve70616, CSCvh25988