CVE-2007-1800 in Trust Agent

सारांश

द्वारा MITRE

Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to gain network access via a spoofed Network Endpoint Assessment posture, aka "NACATTACK." NOTE: this attack might be limited to authenticated users and devices.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• आरक्षित करना: 02/04/2007
• प्रकटीकरण: 02/04/2007
• संयम: स्वीकृत
• प्रविष्टि: VDB-35940
• CPE: तैयार
• CWE: CWE-290 (पुष्टि की गई)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01433
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-1800
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-1800
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-1800/