{"schemaVersion":3,"id":"CVE-2018-0147","aliases":[],"status":"published","duplicateOf":null,"title":"Cisco Secure Access Control System Java Deserialization Vulnerability","description":"A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object. An exploit could allow the attacker to execute arbitrary commands on the device with root privileges. Cisco Bug IDs: CSCvh25988.","dates":{"published":"2018-03-08T07:00:00.000Z","modified":"2026-01-12T22:14:20.636Z","reserved":null,"kevAdded":["2022-03-25T00:00:00.000Z"],"kevDue":["2022-04-15T00:00:00.000Z"]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.18212,"percentile":0.97184,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.18212},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.18212,"percentile":0.97184}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.18212,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.18212,"percentile":0.97184}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-25T00:00:00.000Z","dueDate":"2022-04-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Cisco Secure Access Control System Java Deserialization Vulnerability","description":"A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-0147","label":"nvd.nist.gov/vuln/detail/CVE-2018-0147"}],"vendor":"Cisco","product":"Secure Access Control System (ACS)","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-25T00:00:00.000Z","dueDate":"2022-04-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Cisco Secure Access Control System Java Deserialization Vulnerability","description":"A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-0147","label":"nvd.nist.gov/vuln/detail/CVE-2018-0147"}],"vendor":"Cisco","product":"Secure Access Control System (ACS)","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"},{"id":"CWE-502","name":"Deserialization of Untrusted Data","description":"The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/502.html"}],"affected":[{"vendor":"cisco","product":"secure_access_control_system","name":"secure access control system","label":"secure_access_control_system","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.2\\(0.3\\)","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.2\\(0.3\\)","eol":null,"hubHref":"/vendor/cisco/secure_access_control_system"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securitytracker.com/id/1040463","label":"www.securitytracker.com/id/1040463","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/103328","label":"www.securityfocus.com/bid/103328","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-acs2","label":"tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-acs2","hostname":"tools.cisco.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0147","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0147","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-03-08T07:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-25T00:00:00.000Z","label":"Added to CISA KEV","detail":"Cisco Secure Access Control System Java Deserialization Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-04-15T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2026-01-12T22:14:20.636Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:01:03.685Z","stale":false,"partial":false}}