CVE-2008-3815

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-23 · updated 2026-06-16
Weakness: CWE-287

Description

Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.

Affected products

Cisco Asa 5500: all versions
Cisco Pix: 7.0, 7.1, 7.2, 8.0, 8.1

References

http://secunia.com/advisories/32360
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml
http://www.securityfocus.com/bid/31864
http://www.securitytracker.com/id?1021089
http://www.securitytracker.com/id?1021090
http://www.vupen.com/english/advisories/2008/2899
https://exchange.xforce.ibmcloud.com/vulnerabilities/46024
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983
http://secunia.com/advisories/32360
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml
http://www.securityfocus.com/bid/31864
http://www.securitytracker.com/id?1021089

Get alerted when CVE-2008-3815 or the next vulnerability affects your stack