CVE-2006-0561

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-10 · updated 2026-06-16

Description

Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the plaintext version of the master key.

Affected products

Cisco Secure Access Control Server: 3.0, 3.0.1, 3.0.3, 3.1, 3.1.1, 3.2 (+1)

References

http://securitytracker.com/id?1016042
http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtml
http://www.osvdb.org/25892
http://www.securityfocus.com/archive/1/433286/100/0/threaded
http://www.securityfocus.com/archive/1/433301/100/0/threaded
http://www.securityfocus.com/bid/16743
http://www.symantec.com/enterprise/research/SYMSA-2006-003.txt
http://www.vupen.com/english/advisories/2006/1741
https://exchange.xforce.ibmcloud.com/vulnerabilities/26307
http://securitytracker.com/id?1016042
http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtml
http://www.osvdb.org/25892

Get alerted when CVE-2006-0561 or the next vulnerability affects your stack