Every CVE Search/ Get API key

CVE-2005-4825

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to...

5.7 Medium

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

Exploit likelihood

0.66%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.7

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

Record
CVE-2005-4825
CVSS 2.0
5.7 MediumAV:A/AC:M/Au:N/C:N/I:N/A:C
Updated
2026-11-02
CVE List No score

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

Record
CVE-2005-4825
Updated
2026-11-02
EUVDEUVD-2005-4818 No score

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

Record
EUVD-2005-4818
Updated
2026-11-03
GitHub AdvisoriesGHSA-73j6-q65m-r8w4 No score

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to...

Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue to CVE-2005-4332.

Record
GHSA-73j6-q65m-r8w4
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4825 is a medium vulnerability (CVSS 5.7) in Cisco Network Admission Control Manager And Server System Software, published December 31, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.66%, the 51st percentile. No source names a fixed version.

References

MoveEnter Open