CVE-2008-1155
Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.57%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.57% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- cisco/network admission control
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/29822Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/28807
- http://www.securitytracker.com/id?1019859
- http://www.vupen.com/english/advisories/2008/1248/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41849
- http://secunia.com/advisories/29822Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/28807
- http://www.securitytracker.com/id?1019859
- http://www.vupen.com/english/advisories/2008/1248/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41849
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.