CVE-2005-4825: Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authenti...

Security readout for executives and security teams

Cisco Clean Access 3.5.5 and earlier reportedly allowed unauthenticated file uploads through Secure Smart Manager JSP scripts. The business risk is service disruption from disk exhaustion and unintended exposure of uploaded files. The source bundle does not provide CVSS scoring or a named fixed version. Exposure is limited to organizations still running Cisco Clean Access 3.5.5 or earlier, especially where Secure Smart Manager is reachable by untrusted networks. Modern environments are unlikely to be affected unless legacy appliances or forgotten management interfaces remain deployed. Prioritize as a legacy exposure check. If the product is no longer deployed, no action beyond records cleanup is needed. If found, restrict access quickly and follow Cisco guidance because the issue bypasses authentication and can disrupt availability. Mitigation focus: Inventory any Cisco Clean Access deployments and identify Secure Smart Manager versions.; Check Cisco’s advisory for the supported fix or official workaround.; Restrict Secure Smart Manager access to trusted administration networks..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.