Vulnerability in Cisco Security Manager

CVE-2008-3820

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.

EPSS: 0.014 (69.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Security_manager — versions 3.1, 3.1.1, 3.2
N/a — versions n/a

References

psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (vdb-entry, x_refsource_XF)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)