CVE-2007-0057: Cisco Network Admission Control Manager And Server System Software

High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access.

Affected products

• Cisco Network Admission Control Manager And Server System Software: from 3.6.0.0, up to and including 3.6.4.2; from 4.0.0.0, before 4.0.3.2 (fixed in 4.0.3.2)

Published 2007-01-04. Last modified 2026-06-16.