CVE-2009-0622: Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 760...

Security readout for executives and security teams

This issue affects legacy Cisco ACE load-balancing platforms. A person who can authenticate to the CLI could run operating-system commands on the device. The main business risk is control-plane compromise of traffic-management infrastructure, but the source bundle does not show unauthenticated access, active exploitation, or a CVSS score. Exposure is limited to organizations still running the named Cisco ACE module or ACE 4710 appliance on vulnerable versions, especially where CLI access is reachable by non-minimal administrative accounts. Treat as a high-priority legacy infrastructure review if Cisco ACE is still present. The issue requires authentication, but successful abuse could compromise a traffic-control device. Prioritize inventory, version confirmation, and vendor-guided upgrades. Mitigation focus: Upgrade affected ACE module deployments to A2(1.2) or later.; Upgrade affected ACE 4710 appliances to A1(8a) or later.; Restrict CLI and management access to trusted administrative networks..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.