VULNERABILITY INTELLIGENCE
CVE-2006-0764
CVSS score5.1 MEDIUM
EPSS probability2.03%
CISA KEVNot currently listed
Published2006-02-18
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows remote attackers to bypass authentication and gain privileges, aka Bug ID CSCsd21455.