CVE-2006-4981: Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local networ...

Security readout for executives and security teams

This CVE describes a way for someone physically near the network to get onto a local network by pretending to be an exempt device. The weakness is in Symantec Sygate NAC exception rules that trust a forged MAC address or OUI-based device identity. Exposure is most likely in legacy environments still using Symantec Sygate NAC with broad non-Windows exceptions or OUI-based allowlists. Prioritize review if legacy Sygate NAC still protects sensitive wired networks. The issue requires local network proximity, but successful bypass could undermine segmentation assumptions. Mitigation focus: Review Symantec Sygate NAC exception rules for non-Windows and OUI-based allowances.; Remove broad device-class exceptions where business operations do not require them.; Avoid relying on MAC address or OUI identity as a trusted admission control..

Prepared

Jun 29, 2026, 10:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.