CVE-2007-1800: Cisco Trust Agent

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network access via a spoofed Network Endpoint Assessment posture, aka "NACATTACK." NOTE: this attack might be limited to authenticated users and devices.

Affected products

• Cisco Trust Agent: any version

Published 2007-04-02. Last modified 2026-06-16.