CVE-2008-3820

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-01-22 · updated 2026-06-16

Description

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.

Affected products

Cisco Security Manager: 3.1, 3.1.1, 3.1.1-sp3, 3.2, 3.2-sp2, 3.2.1 (+1)

References

http://secunia.com/advisories/33633
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml
http://www.securityfocus.com/bid/33381
http://www.securitytracker.com/id?1021619
http://www.vupen.com/english/advisories/2009/0214
https://exchange.xforce.ibmcloud.com/vulnerabilities/48134
http://secunia.com/advisories/33633
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml
http://www.securityfocus.com/bid/33381
http://www.securitytracker.com/id?1021619
http://www.vupen.com/english/advisories/2009/0214
https://exchange.xforce.ibmcloud.com/vulnerabilities/48134

Get alerted when CVE-2008-3820 or the next vulnerability affects your stack