CVE-2013-5470: Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket,...

Security readout for executives and security teams

CVE-2013-5470 is a denial-of-service issue in Cisco Secure Access Control System. A malformed network packet sent to the TACACS+ socket could crash a process. For executives, the business risk is disruption to centralized network authentication, not data theft based on the supplied sources. Exposure is most likely where Cisco ACS is deployed with TACACS+ reachable over the network. The source bundle does not provide affected versions or CPEs, so inventory confirmation is required before determining scope. Treat this as an availability risk to network access control. Prioritize if ACS supports critical device administration or authentication paths. If ACS is retired or isolated, urgency is lower but still requires verification. Mitigation focus: Review the Cisco security notice for affected versions and fixed software guidance.; Confirm whether Cisco ACS is still deployed or reachable in production.; Limit TACACS+ access to trusted network paths pending vendor guidance..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.