CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 15, 2022

High

CISA KEV

CVE-2018-0147

Cisco—Secure Access Control System (ACS)

A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2018-0147

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Mar 25, 2022
KEV Added: Mar 25, 2022
Due Date: Apr 15, 2022
Related Articles: 0

Vendor

Cisco

Secure Access Control System (ACS)