TI-2018-00118 Aliases CVE-2018-0147 GHSA-2ccw-7gjg-m467

Improper input validation in Cisco Secure Access Control System

CRITICAL 100Exploited in the wildCWE-20Published 2018-03-08 · Updated 2026-01-12

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-502.

Summary

A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object. An exploit could allow the attacker to execute arbitrary commands on the device with root privileges. Cisco Bug IDs: CSCvh25988.

Why it matters now

Exploitation Active In CISA KEV since 2022-03-25CISA due date 2022-04-15

EPSS 0.18212 97th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Active
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Cisco Secure Access Control System	Cisco Secure Access Control System	—	No fix listed	CNA

Cisco Secure Access Control System Vendor— Affected Cisco Secure Access Control System Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:secure_access_control_system:5.2\(0.3\):::::::*	5.2(0.3)	Vulnerable	Cisco

cpe:2.3:a:cisco:secure_access_control_system:5.2\(0.3\):*:*:*:*:*:*:* Versions 5.2(0.3) Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2022-03-25 Added to CISA KEV
2026-10-02 Threatist record created from CVE-2018-0147
2026-10-03 Alias added: GHSA-2ccw-7gjg-m467

References

Advisory 1

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-acs2

TI-2018-00214 Improper input validation in Cisco Secure Access Control System CVSS 3.0CRITICAL 9.8
TI-2014-00618 The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not… CVSS 2.0HIGH 10.0
TI-2014-00620 The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3… CVSS 2.0HIGH 10.0
TI-2014-00619 The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not… CVSS 2.0HIGH 9.0
TI-2011-00829 The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before… CVSS 2.0MEDIUM 5.0
TI-2017-02938 Information disclosure in Cisco Secure Access Control System CVSS 3.0HIGH 7.5

See all 34 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences