CVE-2008-3815 Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1....
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco asa 5500 | All versions | No fix listed |
| cisco pix | = 7.0 | No fix listed |
| cisco pix | = 7.1 | No fix listed |
| cisco pix | = 7.2 | No fix listed |
| cisco pix | = 8.0 | No fix listed |
| cisco pix | = 8.1 | No fix listed |
References
- 32360 third-party-advisory
- 20081022 Multiple Vulnerabilities in Cisco PIX and Cisco ASA vendor-advisory
- 31864 vdb-entry
- 1021089 vdb-entry
- 1021090 vdb-entry
- ADV-2008-2899 vdb-entry
- cisco-pix-asa-ntdomain-authentication-bypass(46024) vdb-entry
- oval:org.mitre.oval:def:5983 signature vdb-entry