CVE-2014-0648: The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce auth...

Security readout for executives and security teams

Cisco Secure ACS 5.x before 5.5 has a flaw in its RMI interface that can let a remote attacker gain administrative access. For an access-control platform, that is business-significant because compromise could affect authentication infrastructure. The source bundle does not provide CVSS scoring or detailed prerequisites. Exposure is likely limited to organizations running Cisco Secure ACS 5.x earlier than 5.5, especially where the RMI or administrative interface is reachable from untrusted networks. The provided affected-product metadata is incomplete, so inventory confirmation is required. Treat as high priority if Cisco ACS 5.x remains in use. The issue can grant administrative access to an authentication-control system, but urgency depends on confirmed version and management-interface exposure. No active exploitation evidence is provided in the source bundle. Mitigation focus: Review Cisco advisory cisco-sa-20140115-csacs for the supported fixed release path.; Upgrade Cisco Secure ACS 5.x systems earlier than 5.5 according to Cisco guidance.; Restrict RMI and administrative interface access to trusted management networks..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.