Unrated severityNVD Advisory· Published Aug 29, 2013· Updated Apr 29, 2026
CVE-2013-3466
CVE-2013-3466
Description
The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.
Affected products
10cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*range: <=4.2.1.15.10
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.6:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.7:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.8:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130828-acsnvdVendor Advisory
- www.securitytracker.com/id/1028958nvdThird Party AdvisoryVDB Entry
- osvdb.org/96668nvd
News mentions
0No linked articles in our index yet.