CVE-2018-0147VulnerabilityPublished 03/25/2022Updated 10/24/2026

CVE-2018-0147: Cisco Secure Access Control System Java Deserialization Vulnerability

Affects Cisco Secure Access Control System (ACS)Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/25/2022
KEV deadline: 04/15/2022
EPSS: 18.2% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-0147 (opens in a new tab)

Description

CVE-2018-0147 is a high-severity vulnerability in Cisco Secure Access Control System (ACS) involving insecure Java deserialization. This flaw allows an unauthenticated remote attacker to execute arbitrary commands on affected devices by exploiting unsafe deserialization of user-supplied data. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

This vulnerability arises from insecure deserialization of user-supplied content in Cisco Secure Access Control System (ACS), enabling unauthenticated remote attackers to execute arbitrary commands on the device. The root cause is unsafe Java deserialization practices within the software. The vulnerability is tracked as CVE-2018-0147 and is known to be exploited in the wild. No vendor advisory or patch details are included in the provided information.

Impact

An unauthenticated remote attacker can execute arbitrary commands on affected Cisco ACS devices, potentially leading to full system compromise. The exploitation in the wild indicates active threat use, increasing the risk to organizations running vulnerable versions. The exact scope of affected versions and the extent of impact depend on the deployment and configuration of the ACS system.

Mitigation

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until official fixes or mitigations are confirmed, organizations should monitor Cisco security advisories and consider restricting network access to ACS management interfaces to trusted sources.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:57:07 UTC

Weaknesses

References

Related threats