{"id":"CVE-2008-1155","aliases":["EUVD-2008-1164","GHSA-4898-hwxm-j2vf"],"status":"published","title":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6,...","description":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02566,"percentile":0.85232,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2008-04-16T17:00:00Z","modified":"2026-06-16T22:51:06Z","products":[{"vendor":"cisco","product":"network_admission_control"}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1248/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41849","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securitytracker.com/id?1019859","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/28807","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a008097bea0.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29822","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1155"},{"url":"https://github.com/advisories/GHSA-4898-hwxm-j2vf"}],"sources":{"cve":[{"id":"CVE-2008-1155","description":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.","status":"published","published":"2008-04-16T17:00:00Z","modified":"2024-08-07T08:08:57.678Z","updated_at":"2026-11-02T14:34:47.71012Z"}],"euvd":[{"id":"EUVD-2008-1164","description":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.","status":"published","published":"2008-04-16T17:00:00Z","modified":"2024-08-07T08:08:57Z","updated_at":"2026-11-03T01:39:03.090998Z"}],"ghsa":[{"id":"GHSA-4898-hwxm-j2vf","title":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6,...","description":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.","status":"published","published":"2022-05-01T23:37:16Z","modified":"2023-01-31T05:05:38Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:48:53.375258Z"}],"nvd":[{"id":"CVE-2008-1155","description":"Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server (CAS) and Clean Access Manager (CAM) by sniffing error logs.","status":"published","published":"2008-04-16T17:05:00Z","modified":"2026-06-16T22:51:06.503Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:26.27008Z"}]}}