CVE-2008-1155: Cisco Network Admission Control

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.

Affected products

• Cisco Network Admission Control: up to and including 3.6.4.3; up to and including 4.0.5.1; up to and including 4.1.1; version 3.5 only; version 3.6 only; version 3.6.0 only; …

Published 2008-04-16. Last modified 2026-06-16.