CVE-2007-0397

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-20 · updated 2026-06-16

Description

The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information.

Affected products

Cisco Adaptive Security Appliance Device Manager: 5.2.53
Cisco Security Monitoring Analysis And Response System: 4.2.3

References

http://osvdb.org/32720
http://secunia.com/advisories/23836
http://securitytracker.com/id?1017535
http://securitytracker.com/id?1017536
http://www.cisco.com/en/US/products/products_security_advisory09186a00807c517f.shtml
http://www.securityfocus.com/bid/22111
http://www.vupen.com/english/advisories/2007/0245
https://exchange.xforce.ibmcloud.com/vulnerabilities/31567
http://osvdb.org/32720
http://secunia.com/advisories/23836
http://securitytracker.com/id?1017535
http://securitytracker.com/id?1017536

Get alerted when CVE-2007-0397 or the next vulnerability affects your stack