Network Access Control Bypass in Cisco Devices

CVE-2006-4982

Summary

Cisco NAC has a vulnerability that stems from its maintenance of an exception list, which only records device MAC addresses without additional properties. This oversight allows an attacker, who is physically near the network, to exploit this weakness. By spoofing the MAC address of a legitimate device, such as a printer, they can gain unauthorized access to the local network. This vulnerability raises serious concerns regarding the effectiveness of network access control measures and the potential for unauthorized users to compromise network security.

References