CVE-2018-0147: Cisco Secure Access Control System Java Deserialization Vulnerability
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object. An exploit could allow the attacker to execute arbitrary commands on the device with root privileges. Cisco Bug IDs: CSCvh25988.
Other sources
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco Secure Access Control Systemto a version that resolves this vulnerability.Fixed in 5.8 patch 9Patch CSCvh25988
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0147?
CVE-2018-0147 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2018-0147?
To resolve CVE-2018-0147, update Cisco Secure Access Control System to version 5.8 patch 9 or later.
What systems are affected by CVE-2018-0147?
CVE-2018-0147 affects Cisco Secure Access Control System versions prior to 5.8 patch 9.
Can CVE-2018-0147 be exploited remotely?
Yes, CVE-2018-0147 can be exploited by unauthenticated remote attackers.
What type of vulnerability is CVE-2018-0147?
CVE-2018-0147 is an object deserialization vulnerability that can lead to arbitrary command execution.