CVE-2007-0057
Severity:
Pending analysis
Type:
CWE-255
Credentials Management
Publication date:
04/01/2007
Last modified:
01/11/2018
Description
Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:* | 3.6.0.0 (including) | 3.6.4.2 (including) |
cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:* | 4.0.0.0 (including) | 4.0.3.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page