6.8

CVE-2008-3820

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Security Manager Version3.1
Cisco ≫ Security Manager Version3.1.1
Cisco ≫ Security Manager Version3.1.1 Updatesp3
Cisco ≫ Security Manager Version3.2
Cisco ≫ Security Manager Version3.2 Updatesp2
Cisco ≫ Security Manager Version3.2.1
Cisco ≫ Security Manager Version3.2.1 Updatesp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.746
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P