CVE-2004-1461: Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connectio...

Security readout for executives and security teams

This issue affects legacy Cisco Secure Access Control Server administrative access. During GUI authentication, ACS could open an unauthenticated TCP connection on a random port. A remote attacker connecting from the same IP address could bypass authentication. Treat exposed ACS management interfaces as sensitive because ACS often supports identity and network access decisions. Exposure is most likely where Cisco Secure ACS 3.2(3) or earlier remains deployed and the ACS GUI is reachable beyond a tightly controlled management network. Shared-IP environments such as NAT may increase concern, based on the same-IP condition described in the CVE. Prioritize this if any legacy Cisco ACS server is still operating, especially if administrative access is broadly reachable. Although active exploitation is not evidenced here, an authentication bypass on an access-control platform can affect network trust and administrative control. Mitigation focus: Identify any Cisco Secure ACS 3.2(3) or earlier deployments.; Review Cisco advisory guidance for supported fixes or upgrade paths.; Restrict ACS GUI access to trusted management networks only..

Prepared

Jun 30, 2026, 00:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.