Vulnerability Description
Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service (process crash) via malformed TCP packets, aka Bug ID CSCuh12488.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Secure Access Control System | - |
Related Weaknesses (CWE)
References
- http://osvdb.org/96822
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5470Vendor Advisory
- http://www.securityfocus.com/bid/62145Third Party AdvisoryVDB Entry
- http://osvdb.org/96822
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5470Vendor Advisory
- http://www.securityfocus.com/bid/62145Third Party AdvisoryVDB Entry
FAQ
What is CVE-2013-5470?
CVE-2013-5470 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service (process crash) via malformed TCP...
How severe is CVE-2013-5470?
CVE-2013-5470 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-5470?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Secure Access Control System.