Cisco Security Agent vulnerabilities

13 CVEs affecting Cisco Security Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0364, published 2011-02-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0364, published 2011-02-19. High severity, CVSS 10.0. EPSS: 19.6% chance of exploitation in the next 30 days. The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified…
CVE-2007-5580, published 2007-12-15. High severity, CVSS 10.0. EPSS: 6.4% chance of exploitation in the next 30 days. Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute…
CVE-2006-5553, published 2006-10-26. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote attackers to cause a denial…
CVE-2010-0148, published 2010-02-23. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via "a series of TCP packets."
CVE-2010-0146, published 2010-02-23. Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.
CVE-2010-0147, published 2010-02-23. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute…
CVE-2004-1112, published 2005-01-10. Medium severity, CVSS 5.1. EPSS: 1.5% chance of exploitation in the next 30 days. The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass…
CVE-2005-2280, published 2005-07-18. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet.
CVE-2007-1068, published 2007-02-22. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client…
CVE-2007-1067, published 2007-02-22. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…

Latest

CVE-2007-1066, published 2007-02-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…
CVE-2007-1065, published 2007-02-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…
CVE-2007-1064, published 2007-02-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…