CVE-2008-2736

CWE-200 — Information ExposureCWE-3994 documents4 sources
Severity
7.1HIGH
EPSS
0.3%
top 48.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance 5500
Timeline
PublishedSep 4
Latest updateMay 1

Description

Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5, when configured as a clientless SSL VPN endpoint, allows remote attackers to obtain usernames and passwords via unknown vectors, aka Bug ID CSCsq45636.

CVSS vector

AV:N/AC:M/C:C/I:N/A:NExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-qr44-66jp-647q: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8↗2022-05-01
▶
CVEList
CVE-2008-2736: Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8↗2008-09-04
▶

📋Vendor Advisories

1
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA↗2008-09-03
▶