Cisco Network Access Control vulnerabilities

2 CVEs affecting Cisco Network Access Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-4983, published 2006-09-26.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-4983, published 2006-09-26. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco NAC allows quarantined devices to communicate over the network with (1) DNS, (2) DHCP, and (3) EAPoUDP, which allows attackers to bypass control methods by tunneling network traffic through one…
• CVE-2006-4982, published 2006-09-26. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by…