CVE-2007-0057

Опубликовано: 04 янв. 2007

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access.

Ссылки

http://osvdb.org/32578
Broken Link
http://secunia.com/advisories/23617
Third Party Advisory
http://securitytracker.com/id?1017465
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0030
Third Party Advisory
http://osvdb.org/32578
Broken Link
http://secunia.com/advisories/23617
Third Party Advisory
http://securitytracker.com/id?1017465
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0030
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:*

Версия от 3.6.0.0 (включая) до 3.6.4.2 (включая)

cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:*

Версия от 4.0.0.0 (включая) до 4.0.3.2 (исключая)

EPSS

Процентиль: 87%

0.03241

Низкий

10 Critical

CVSS2

Дефекты

CWE-255

Связанные уязвимости

GHSA-c8f3-cw65-hxxc

github

почти 4 года назад