Vulnerability record · CVE-2013-3466 · published 29 August 2013

CVE-2013-3466: Cisco secure access control server improper authentication vulnerability

Cisco · Secure Access Control Server

The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.

9.3 CVSS 2.0 High EPSS 5.1% · top 7.9% CWE-287 · Improper authentication

9.3CVSS 2.0 base score

5.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Secure Access Control Server Cisco

References

Link	Tags
http://osvdb.org/96668
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130828-acs	Vendor Advisory
http://www.securitytracker.com/id/1028958	Third Party AdvisoryVDB Entry
http://osvdb.org/96668
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130828-acs	Vendor Advisory
http://www.securitytracker.com/id/1028958	Third Party AdvisoryVDB Entry

Track CVE-2013-3466 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-4098Cisco secure access control server vulnerabilityStack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before…EPSS 13%31 Dec 2006 10.0CVE-2004-1099Cisco secure access control server vulnerabilityCisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when…EPSS 10%10 Jan 2005 10.0CVE-2000-1054Cisco secure access control server vulnerabilityBuffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly exec…EPSS 8.4%11 Dec 2000 10.0CVE-2000-1055Cisco secure access control server vulnerabilityBuffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary comm…EPSS 4.0%11 Dec 2000 7.8CVE-2006-4097Cisco secure access control server vulnerabilityMultiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engi…EPSS 4.3%31 Dec 2006 7.5CVE-2008-2441Cisco secure acs vulnerabilityCisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11, and 4.2.x before 4.2(0) Build 124 Patch 4 does not…EPSS 3.0%4 Sep 2008 7.5CVE-2007-0105Cisco secure access control server vulnerabilityStack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before …EPSS 11%9 Jan 2007 7.5CVE-2006-3226Cisco secure access control server vulnerabilityCisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server …EPSS 2.4%26 Jun 2006

Source: NIST National Vulnerability Database (record CVE-2013-3466), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.