CVE-2018-0147
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.
CISA Known Exploited Vulnerability
Vendor / Product
Cisco — Secure Access Control System (ACS)
Date Added
2022-03-25
Remediation Due
2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2018-0147