Login Request a demo
Unscored severity · published Jan 8, 2014
CVE-2014-0654
Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383
–
CVSS
2.3%
EPSS
No
On KEV
Description
Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CD
Context Directory Agent · Cisco
All versions, or not specified · source: NVD
Affected product
CD
Context Directory Agent
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0654
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0654
osvdb.org
http://osvdb.org/101802
secunia.com
http://secunia.com/advisories/56365
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0654
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32366
Third Party Advisory
http://www.securityfocus.com/bid/64709
Third Party Advisory
http://www.securitytracker.com/id/1029574
More from Context Directory Agent
–
CVE-2014-0656
Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353
–
CVE-2014-0652
Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbitrary web script or HTML via a crafted…
–
CVE-2014-0651
The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain…
–
CVE-2013-1196
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime…
–
CVE-2013-1125
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution…