CVE-2007-1065

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-22 · updated 2026-06-16

Description

Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.

Affected products

Cisco Secure Services Client: 4.0, 4.0.5, 4.0.51
Cisco Security Agent: 5.0, 5.1
Cisco Trust Agent: 1.0, 2.0, 2.0.1, 2.1
Meetinghouse Aegis Secureconnect Client: windows_platform

References

http://osvdb.org/33048
http://secunia.com/advisories/24258
http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
http://www.securityfocus.com/bid/22648
http://www.securitytracker.com/id?1017683
http://www.securitytracker.com/id?1017684
http://www.vupen.com/english/advisories/2007/0690
https://exchange.xforce.ibmcloud.com/vulnerabilities/32622
http://osvdb.org/33048
http://secunia.com/advisories/24258
http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
http://www.securityfocus.com/bid/22648

Get alerted when CVE-2007-1065 or the next vulnerability affects your stack