CVE-2007-3184

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-06-12 · updated 2026-06-16
Weakness: CWE-287

Description

Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

Affected products

macOS: all versions

References

http://secunia.com/advisories/25598
http://securityreason.com/securityalert/2796
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html
http://www.osvdb.org/35340
http://www.securityfocus.com/archive/1/471041/100/0/threaded
http://www.securityfocus.com/bid/24415
http://www.securitytracker.com/id?1018217
http://www.vupen.com/english/advisories/2007/2140
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807
http://secunia.com/advisories/25598
http://securityreason.com/securityalert/2796
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html

Get alerted when CVE-2007-3184 or the next vulnerability affects your stack