CVE-2006-4982: Cisco Network Access Control

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address of a disconnected printer.

Affected products

• Cisco Network Access Control: any version

Published 2006-09-26. Last modified 2026-06-16.