Cisco Network Admission Control Manager And Server System Software vulnerabilities

7 CVEs affecting Cisco Network Admission Control Manager And Server System Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1177, published 2013-04-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0057, published 2007-01-04. High severity, CVSS 10.0. EPSS: 4.1% chance of exploitation in the next 30 days. Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the…
CVE-2005-4332, published 2005-12-17. High severity, CVSS 9.4. EPSS: 3.8% chance of exploitation in the next 30 days. Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP…
CVE-2007-0058, published 2007-01-04. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database…
CVE-2006-4430, published 2006-08-29. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms…
CVE-2005-2631, published 2005-08-23. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security…
CVE-2013-1177, published 2013-04-18. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors,…
CVE-2005-4825, published 2005-12-31. Medium severity, CVSS 5.7. EPSS: 0.6% chance of exploitation in the next 30 days. Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files…