CVE-2011-0963

Cisco NAC Guest Server < 2.0.3 - Unauthenticated RADIUS Authentication Bypass

Title source: llm

Description

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1025272

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml

Scores

EPSS 0.0180

EPSS Percentile 76.2%

Details

CWE

CWE-264

Status published

Products (9)

cisco/nac_guest_server

cisco/nac_guest_server_software 1.0.0

cisco/nac_guest_server_software 1.1.0

cisco/nac_guest_server_software 1.1.1

cisco/nac_guest_server_software 1.1.2

cisco/nac_guest_server_software 1.1.3

cisco/nac_guest_server_software 2.0.0

cisco/nac_guest_server_software 2.0.1

cisco/nac_guest_server_software < 2.0.2

Published Mar 31, 2011

Tracked Since Feb 18, 2026