CVE-2008-3815: cisco pix Improper Authentication

EPSS trend

Probability

1.55%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

0.00 pp

From 1.55% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

www.securitytracker.com/id?1021090VDB EntryX Refsource SECTRACK
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/31864VDB EntryX Refsource BID
secunia.com/advisories/32360Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1021089VDB EntryX Refsource SECTRACK
exchange.xforce.ibmcloud.com/vulnerabilities/46024VDB EntryX Refsource XF
www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtmlVendor AdvisoryX Refsource CISCO
www.vupen.com/english/advisories/2008/2899VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2007-2464ciscoadaptive_security_appliance_software+12.94%19y ago02-05-2007 22:00Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."CVE-2007-2463ciscoadaptive_security_appliance_software+12.88%19y ago02-05-2007 22:00Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service (device reload) via unknown vectors related to VPN connection termination and password expiry.CVE-2007-2461ciscoadaptive_security_appliance_software+14.37%19y ago02-05-2007 22:00The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocated for a local buffer. NOTE: this issue only occurs when multiple DHCP servers are used.CVE-2007-2462ciscoadaptive_security_appliance_software+16.45%19y ago02-05-2007 22:00Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to bypass LDAP authentication and gain privileges via unknown vectors.CVE-2005-3774ciscopix18.21%20y ago23-11-2005 00:00Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.CVE-2008-2733ciscoadaptive_security_appliance_5500+13.19%18y ago04-09-2008 16:00Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service (device reload) via a crafted authentication attempt, aka Bug ID CSCso69942.

All vulnerabilities inpix

CVE-2008-3815: cisco pix Improper Authentication

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References