Security Advisory

CVE-2013-3466

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-08-29 10:00:00
Last updated 2024-08-06 16:07:37
Assigner cisco
CVSS score not scored
State PUBLISHED

Description

The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.