CVE-2011-0963

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-31 · updated 2026-06-16
Weakness: CWE-264

Description

The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922.

Affected products

Cisco Nac Guest Server: all versions
Cisco Nac Guest Server Software: through 2.0.2; 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 2.0.0 (+1)

References

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml
http://www.securitytracker.com/id?1025272
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml
http://www.securitytracker.com/id?1025272

Get alerted when CVE-2011-0963 or the next vulnerability affects your stack