Total vulnerabilities in the database
The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.
| Software | From | Fixed in |
|---|---|---|
| cisco / secure_access_control_server | 4.2.1.15.1 | 4.2.1.15.1.x |
| cisco / secure_access_control_server | 4.2.1.15.4 | 4.2.1.15.4.x |
| cisco / secure_access_control_server | 4.2.1.15.3 | 4.2.1.15.3.x |
| cisco / secure_access_control_server | 4.2.1.15.0 | 4.2.1.15.0.x |
| cisco / secure_access_control_server | 4.2.1.15.6 | 4.2.1.15.6.x |
| cisco / secure_access_control_server | - | 4.2.1.15.10.x |
| cisco / secure_access_control_server | 4.2.1.15.7 | 4.2.1.15.7.x |
| cisco / secure_access_control_server | 4.2.1.15.8 | 4.2.1.15.8.x |
| cisco / secure_access_control_server | 4.2.1.15.9 | 4.2.1.15.9.x |
| cisco / secure_access_control_server | 4.2.1.15.2 | 4.2.1.15.2.x |