vulnwire
5.7med

CVE-2005-4825

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of ser…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
5.7
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 52%
Public exploits
0
none known

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

Exploit prediction (EPSS)

0.66% probability of exploitation in the next 30 days, higher than 52% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.7AV:A/AC:M/Au:N/C:N/I:N/A:C

References

  • securityfocus.com /archive/1/419645/30/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • osvdb.org /21959 · vdb-entry, x_refsource_OSVDB, x_transferred
  • cisco.com /warp/public/707/cisco-response-20051221-CCA.shtml · vendor-advisory, x_refsource_CISCO, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.