CVE-2007-4786: cisco adaptive_security_appliance_software
Vulnerability summary
CVE-2007-4786 is a medium (CVSS 5.3) vulnerability in cisco adaptive_security_appliance_software. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 41.6% of scored vulnerabilities.
Timeline
- 10-09-2007PublishedVulnerability first disclosed.
- 17-01-2025Last modifiedVulnerability information updated.
Description
Cisco Adaptive Security Appliance (ASA) running PIX 7.0 before 7.0.7.1, 7.1 before 7.1.2.61, 7.2 before 7.2.2.34, and 8.0 before 8.0.2.11, when AAA is enabled, composes %ASA-5-111008 messages from the "test aaa" command with cleartext passwords and sends them over the network to a remote syslog server or places them in a local logging buffer, which allows context-dependent attackers to obtain sensitive information.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST5.3MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.50%
Chance of exploitation in the next 30 days
Percentile
42%
Versus all other CVEs
30-day change
0.00 pp
From 0.50% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- adaptive_security_appliance_software≥ 7.0, < 7.0.7.1 | ≥ 7.1, < 7.1.2.61 | ≥ 7.2, < 7.2.2.34 | ≥ 8.0, < 8.0.2.11
1 vendor · 1 product
References
9 links- tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsj72903X Refsource MISCBroken LinkVendor Advisory