high7.5
CVE-2007-1800
Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network…
Impact
Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network access via a spoofed Network Endpoint Assessment posture, aka "NACATTACK." NOTE: this attack might be limited to authenticated users and devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Trust Agent | All versions |
References
- NVD record
- CVE.org record
- http://osvdb.org/34123
- http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Dror
- http://www.cisco.com/en/US/products/products_security_response09186a00808110da.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33557
- http://osvdb.org/34123
- http://www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Dror
- http://www.cisco.com/en/US/products/products_security_response09186a00808110da.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33557