Unscored severity · published Jan 22, 2009
CVE-2008-3820
Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Security Manager · Cisco
3.1; 3.1.1; 3.1.1; 3.2; 3.2; 3.2.1; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3820
Vendor Advisory
http://secunia.com/advisories/33633
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/33381
www.securitytracker.com
http://www.securitytracker.com/id?1021619
www.vupen.com
http://www.vupen.com/english/advisories/2009/0214
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/48134
More from Security Manager
9.8
CVE-2020-27131
Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands…
9.8
CVE-2020-27125
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system
9.8
CVE-2019-12630
A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected…
9.1
CVE-2020-27130
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information
9.1
CVE-2019-1903
A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of service (DoS) condition