VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 29, 2013· Updated Jun 16, 2026

CVE-2013-3466

CVE-2013-3466

Description

The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Cisco Systems, Inc./Secure Access Control Server11 versions
    cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*range: <=4.2.1.15.10
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.6:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.7:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.8:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_access_control_server:4.2.1.15.9:*:*:*:*:*:*:*
    • (no CPE)range: <4.2.1.15.11

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.