PT-2007-1550 · Cisco · Cisco Clean Access

Publicado 2007-01-04 · Atualizado 2018-11-01 · CVE-2007-0057

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Clean Access (CCA) versions 3.6.x through 3.6.4.2 Cisco Clean Access (CCA) versions 4.0.x through 4.0.3.2

Description The issue is related to the improper configuration of a shared secret authentication key, resulting in all devices having the same shared secret. This allows remote attackers to gain unauthorized access.

Recommendations For versions 3.6.x through 3.6.4.2, update the configuration to use unique shared secret authentication keys for each device. For versions 4.0.x through 4.0.3.2, update the configuration to use unique shared secret authentication keys for each device. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2007-0057

Produtos afetados

Cisco Clean Access

Referências · 6

• http://vupen.com/english/advisories/2007/0030 · Nota
• http://secunia.com/advisories/23617 · Nota
• http://osvdb.org/32578 · Nota
• http://securitytracker.com/id?1017465 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0057 · Nota de Segurança
• http://cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml · Aviso do Fabricante