VYPR
← All advisories
High severity8.8NVD Advisory· Published Feb 26, 2016· Updated Jun 17, 2026

CVE-2016-1297

CVE-2016-1297

Description

The Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Cisco Systems, Inc./Application Control Engine Software7 versions
    cpe:2.3:a:cisco:application_control_engine_software:a5\(1.0\):*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:cisco:application_control_engine_software:a5\(1.0\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:application_control_engine_software:a5\(1.1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:application_control_engine_software:a5\(1.2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:application_control_engine_software:a5\(2.0\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:application_control_engine_software:a5\(2.1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:application_control_engine_software:a5\(2.1e\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:application_control_engine_software:a5\(3.0\):*:*:*:*:*:*:*
  • Cisco Systems, Inc./Ace 4710llm-fuzzy
    Range: < A5(3.1)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.