KNOWN EXPLOITED VULNERABILITY
CISA KEV 处置信息
已确认在野利用
- 加入 KEV
- 2022/03/25
- 整改期限
- 2022/04/15已逾期 1649 天
- CISA 厂商
- Cisco
- CISA 产品
- Secure Access Control System (ACS)
要求采取的措施
Apply updates per vendor instructions.
CISA 说明
https://nvd.nist.gov/vuln/detail/CVE-2018-0147
漏洞描述
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.
影响产品
暂无结构化产品信息。
修复建议
Apply updates per vendor instructions.