CVE-2008-1155

Published: Apr 16, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.

Affected (22)

Products: Cisco: Network Admission Control

Cisco

1 product

Network Admission Control

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Cisco Network Admission Control	Up to 3.6.4.3
Cisco Network Admission Control	Up to 4.0.5.1
Cisco Network Admission Control	Up to 4.1.1
Cisco Network Admission Control	Version 3.5
Cisco Network Admission Control	Version 3.6.0.1
Cisco Network Admission Control	Version 3.6.0
Cisco Network Admission Control	Version 3.6.1.1
Cisco Network Admission Control	Version 3.6.2.1
Cisco Network Admission Control	Version 3.6.2.2
Cisco Network Admission Control	Version 3.6.4.1
Cisco Network Admission Control	Version 3.6.4.2
Cisco Network Admission Control	Version 3.6
Cisco Network Admission Control	Version 4.0.0.1
Cisco Network Admission Control	Version 4.0.2.1
Cisco Network Admission Control	Version 4.0.2.2
Cisco Network Admission Control	Version 4.0.3.1
Cisco Network Admission Control	Version 4.0.3.2
Cisco Network Admission Control	Version 4.0.3.3
Cisco Network Admission Control	Version 4.0.5.0
Cisco Network Admission Control	Version 4.0
Cisco Network Admission Control	Version 4.1.0
Cisco Network Admission Control	Version 4.1