VulnerabilityModified

CVE-2008-2441

HIGH 7.5EPSS 2.95%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.95%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Cisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11, and 4.2.x before 4.2(0) Build 124 Patch 4 does not properly handle an EAP Response packet in which the value of the length field exceeds the actual packet length, which allows remote authenticated users to cause a denial of service (CSRadius and CSAuth service crash) or possibly execute arbitrary code via a crafted RADIUS (1) EAP-Response/Identity, (2) EAP-Response/MD5, or (3) EAP-Response/TLS Message Attribute packet.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 2.95% probability · 87th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-399
Affected: cisco/secure acs · cisco/secure access control server
Source: cve@mitre.org

EPSS trend

EPSS 3.0% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.