Cisco Trust Agent vulnerabilities

6 CVEs affecting Cisco Trust Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-1800, published 2007-04-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1800, published 2007-04-02. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network access via a spoofed Network Endpoint…
CVE-2007-1068, published 2007-02-22. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client…
CVE-2007-1067, published 2007-02-22. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…
CVE-2007-1064, published 2007-02-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…
CVE-2007-1065, published 2007-02-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…
CVE-2007-1066, published 2007-02-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect…