CVE-2006-4430 json
The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CC…
published 2006-08-29 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4418
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.0%
- EPSS 2.0% chance of exploitation in 30 days, percentile 80%
- public exploits
- 0
- none known
Summary
The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP stack. NOTE: the vendor has disputed the severity of this issue, stating that users cannot bypass authentication mechanisms.
Exploit prediction
1.95% chance of exploitation in the next 30 days, higher than 80% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
References
-
cisco.com
/en/US/products/ps6128/products_security_notice09186a00804fa82b.html
vendor-advisory
-
cisco.com
/en/US/products/ps6128/tsd_products_security_response09186a008071d609.html
vendor-advisory
-
archive.cert.uni-stuttgart.de
/archive/bugtraq/2005/08/msg00200.html
mailing-list
-
securityfocus.com
/bid/19726
vdb-entry
-
securityfocus.com
/archive/1/444737/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/408603/30/0/threaded
mailing-list
-
securityfocus.com
/archive/1/444501/100/0/threaded
mailing-list
-
securityfocus.com
/archive/1/444424/100/0/threaded
mailing-list
Sources
- CVE List CVE-2006-4430
- NVD CVE-2006-4430
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.