CVE-2013-1125: The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS),...

Security readout for executives and security teams

CVE-2013-1125 is a local privilege escalation issue in the command-line interface of several Cisco security, identity, and network management products. A user who already has local access could gain root privileges. The public bundle does not provide CVSS, affected versions, fixed versions, or exploitation evidence. Exposure is most likely where the named Cisco appliances or management platforms are deployed and local CLI access is available to administrators, operators, support users, or compromised accounts. Version-level exposure cannot be determined from the supplied bundle. Treat this as high priority for environments running affected Cisco security or network management systems. The risk depends on local access, but successful abuse could give root control over infrastructure management platforms. Prioritize inventory, access restriction, and vendor-guidance review. Mitigation focus: Review Cisco’s security notice for affected versions and fixed software guidance.; Restrict CLI access to trusted administrators until exposure is confirmed.; Remove unnecessary local accounts and enforce least privilege for appliance access..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.