Lucene search

[email protected]CVE-2007-0057

HistoryJan 04, 2007 - 10:28 p.m.

CVE-2007-0057

2007-01-0422:28:00

CWE-255

[email protected]

web.nvd.nist.gov

cisco

clean access

cca

unauthorized access

cve-2007-0057

nvd

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.1%

JSON

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access.

CPENameOperatorVersion
cisco:network_admission_control_manager_and_server_system_softwarecisco network admission control manager and server system softwarele3.6.4.2
cisco:network_admission_control_manager_and_server_system_softwarecisco network admission control manager and server system softwarelt4.0.3.2

CPE	Name	Operator	Version
cisco:network_admission_control_manager_and_server_system_software	cisco network admission control manager and server system software	le	3.6.4.2
cisco:network_admission_control_manager_and_server_system_software	cisco network admission control manager and server system software	lt	4.0.3.2

References

osvdb.org/32578

secunia.com/advisories/23617

securitytracker.com/id?1017465

www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml

www.vupen.com/english/advisories/2007/0030

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.1%

JSON

Related for CVE-2007-0057

prion1 securityvulns1