CVE-2007-0057

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access.

• CWE-255

• http://osvdb.org/32578Broken Link
• http://secunia.com/advisories/23617Third Party Advisory
• http://securitytracker.com/id?1017465Third Party Advisory, VDB Entry
• http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0030Third Party Advisory
• http://osvdb.org/32578Broken Link
• http://secunia.com/advisories/23617Third Party Advisory
• http://securitytracker.com/id?1017465Third Party Advisory, VDB Entry
• http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0030Third Party Advisory

Published

Jan 4, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0051Format string vulnerability in Apple iPhoto 6.0.5 (316), and…
• CVE-2007-0052SQL injection vulnerability in haberdetay.asp in Vizayn Habe…
• CVE-2007-0053SQL injection vulnerability in detail.asp in ASP SiteWare au…
• CVE-2007-0054Cross-site scripting (XSS) vulnerability in gbrowse.php in B…
• CVE-2007-0055Directory traversal vulnerability in formbankcgi.exe/Abfrage…
• CVE-2007-0056Multiple cross-site scripting (XSS) vulnerabilities in AShop…
• CVE-2007-0058Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x throu…
• CVE-2007-0059Cross-zone scripting vulnerability in Apple Quicktime 3 to 7…
• CVE-2007-0060Stack-based buffer overflow in the Message Queuing Server (C…
• CVE-2007-0061The DHCP server in EMC VMware Workstation before 5.5.5 Build…
• CVE-2007-0062Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1…
• CVE-2007-0063Integer underflow in the DHCP server in EMC VMware Workstati…