CVE-2007-1800: Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information...

Security readout for executives and security teams

This issue concerns Cisco Secure ACS accepting Cisco Trust Agent posture information without requiring authentication. In plain terms, a device could potentially appear compliant to network access controls and gain access it should not have. The provided evidence does not identify affected versions, a CVSS score, or active exploitation. Exposure is most likely in legacy environments still using Cisco Secure ACS with Cisco Trust Agent and NAC posture assessment workflows. The provided bundle does not identify affected versions, deployment prerequisites, or internet exposure patterns. Handle this as a legacy network-access-control exposure review. It is potentially serious because the impact is unauthorized network access, but urgency is constrained by incomplete version, exploit, and remediation evidence in the provided sources. Mitigation focus: Review Cisco’s NACATTACK advisory for vendor-supported remediation or configuration guidance.; Inventory any Cisco Secure ACS and Cisco Trust Agent deployments still in use.; Prioritize retirement or isolation of legacy ACS/CTA posture assessment paths..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.