The vulnerability is caused due to a boundary error within Cisco Secure ACS UCP when processing users info with CSuserCGI.exe vulnerable module.
CVE Link
Exploit Type - Old
Exploits/Remote
Exploit Platform
Product Name