PT-2007-1550 · Cisco · Cisco Clean Access

Published 2007-01-04 · Updated 2018-11-01 · CVE-2007-0057

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Clean Access (CCA) versions 3.6.x through 3.6.4.2 Cisco Clean Access (CCA) versions 4.0.x through 4.0.3.2

Description The issue is related to the improper configuration of a shared secret authentication key, resulting in all devices having the same shared secret. This allows remote attackers to gain unauthorized access.

Recommendations For versions 3.6.x through 3.6.4.2, update the configuration to use unique shared secret authentication keys for each device. For versions 4.0.x through 4.0.3.2, update the configuration to use unique shared secret authentication keys for each device. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2007-0057

Affected Products

Cisco Clean Access

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-0057 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml · Vendor Advisory
• http://vupen.com/english/advisories/2007/0030 · Note
• http://secunia.com/advisories/23617 · Note
• http://osvdb.org/32578 · Note
• http://securitytracker.com/id?1017465 · Note