PT-2011-2781 · Cisco · Cisco Network Admission Control (Nac) Guest Server

Published 2011-03-31 · Updated 2016-12-07 · CVE-2011-0963

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Network Admission Control (NAC) Guest Server versions prior to 2.0.3

Description The default configuration of the RADIUS authentication feature allows remote attackers to bypass intended access restrictions and obtain network connectivity.

Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-0963

Affected Products

Cisco Network Admission Control (Nac) Guest Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-0963 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml · Vendor Advisory
• http://securitytracker.com/id?1025272 · Note