CVE-2008-1155
Estado: ModificadaAlta (10)—
Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.57%
- Percentil entre todas las CVEs puntuadas: 85
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-200
Referencias
- http://secunia.com/advisories/29822
- http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml
- http://www.securityfocus.com/bid/28807
- http://www.securitytracker.com/id?1019859
- http://www.vupen.com/english/advisories/2008/1248/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41849
- http://secunia.com/advisories/29822
- http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml
- http://www.securityfocus.com/bid/28807
- http://www.securitytracker.com/id?1019859
- http://www.vupen.com/english/advisories/2008/1248/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41849
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-1155",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-04-16T17:05:00.000",
"references": [
{
"url": "http://secunia.com/advisories/29822",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/28807",
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id?1019859",
"source": "psirt@cisco.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1248/references",
"source": "psirt@cisco.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41849",
"source": "psirt@cisco.com"
},
{
"url": "http://secunia.com/advisories/29822",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/28807",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1019859",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1248/references",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41849",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs."
},
{
"lang": "es",
"value": "Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x anterior a v3.6.4.4, 4.0.x anterior a v4.0.6, y 4.1.x anterior4.1.2, permite a atacantes remotos obtener el secreto compartido para Clean Access Server (CAS) y Clean Access Manager (CAM) a través de la escucha de red de los logs de errores."
}
],
"lastModified": "2026-06-16T22:51:06.503",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BFAE963-6E84-4712-A628-6240D97C200A",
"versionEndIncluding": "3.6.4.3"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "432F7177-A43A-463A-B663-9181B0506545",
"versionEndIncluding": "4.0.5.1"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9174F08C-55B7-4985-9964-732088051BA5",
"versionEndIncluding": "4.1.1"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0051F9BB-0315-4541-95A5-CAAC6A3FC9A9"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57F000C2-5343-41CE-81EF-D26D7E884798"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1849F3F6-834E-4C3A-B1B2-4B0C360FE03C"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1898068E-41B8-4C25-B240-2779206FB0A0"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED68FC7E-A6A6-49AB-AEDB-CE70C1139BC8"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAE93C0F-D240-47D7-B638-6E7AB65C8ABC"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "300CE692-9161-4866-96CD-C865000FA481"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BE6DF16-6846-4246-AF33-58FD02038D93"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:3.6.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DA5D3A7-6B5B-4699-8FBE-6DC36F8C350F"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD36F046-CCBF-467D-9522-81307A47D7F2"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC29AD92-F6B6-4CF3-9471-EAE70284C9B3"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22FD214D-4176-4388-A837-21DAFE62D502"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBAD29D5-0C9F-44DC-9574-793DE4C90316"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A77575E-9676-48DA-A28D-85D3D8C1EAD1"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86E65BA0-55E6-4D6E-BAED-26769B1671D5"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42A5102C-86F2-4194-BAEA-7EAD5CAC5ABD"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.0.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F31B7941-03B8-430E-AA23-B105138FC5F7"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E76E6DCE-93DE-4522-BD35-82440B4EE635"
},
{
"criteria": "cpe:2.3:a:cisco:network_admission_control:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83407842-77E2-417D-9355-6CFDADB62EEF"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}