{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T13:56:33Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20080903-CVE-2008-2441","slug":"cisco-sa-20080903-cve-2008-2441","vendor":"Cisco","title":"Cisco Secure Access Control Server (ACS) Denial of Service Vulnerability","summary":"Cisco Secure Access Control Server (ACS) contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability exists due to an error when handling Remote Authentication Dial In User Service (RADIUS) Extensible Authentication Protocol (EAP) responses.  An authenticated, remote attacker could exploit this vulnerability by submitting a malicious RADIUS EAP response to the target system.  This action could cause the authentication and authorization service and a service used to communicate with the device requesting authentication to crash, creating a DoS condition. Cisco has confirmed this vulnerability and released updated software. A successful attack could disrupt authentication services on the target system.  By repeatedly sending malicious RADIUS EAP responses, the attacker could cause a persistent DoS condition.  This situation could prevent devices that rely on authorization by an AAA server from connecting to the network.","severity":"Medium","published_at":"2008-09-03T17:51:46Z","updated_at":"2008-09-03T17:51:46Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20080903-CVE-2008-2441","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20080903-CVE-2008-2441/csaf/Cisco-SA-20080903-CVE-2008-2441.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.02952},"cves":[{"id":"CVE-2008-2441","kev":false,"epss":{"score":0.02952,"percentile":0.85658,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Secure Access Control System (ACS)","slug":"cisco-secure-access-control-system-acs","vendor":"Cisco"},"cve":{"id":"CVE-2008-2441"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:35:44Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Secure Access Control System (ACS)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02952,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2008-09-03T17:51:46Z","updated_at":"2008-09-03T17:51:46Z","advisory_updated_at":"2008-09-03T17:51:46Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20080903-CVE-2008-2441","row_display_order":1}]}