{"api_version":"1","generated_at":"2026-07-23T08:53:00+00:00","cve":"CVE-2008-3820","urls":{"html":"https://cve.report/CVE-2008-3820","api":"https://cve.report/api/cve/CVE-2008-3820.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-3820","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-3820"},"summary":{"title":"CVE-2008-3820","description":"Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain \"root access\" to IEV via unspecified use of TCP sessions to these ports.","state":"PUBLISHED","assigner":"cisco","published_at":"2009-01-22 18:30:03","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Cisco Security Advisory: Cisco Security Manager Vulnerability  [Products & Services] - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/0214","name":"http://www.vupen.com/english/advisories/2009/0214","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48134","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48134","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/33633","name":"http://secunia.com/advisories/33633","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Security Manager Security Bypass Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/33381","name":"http://www.securityfocus.com/bid/33381","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Security Manager IPS Event Viewer Remote Unauthorized TCP Port Access Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1021619","name":"http://www.securitytracker.com/id?1021619","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Security Manager Lets Remote Users Access the Database - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3820","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3820","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"3.1.1","cpe7":"sp3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"3.2","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"3.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3820","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"security_manager","cpe6":"3.2.1","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:52:59.866Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"33381","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33381"},{"name":"cisco-securitymanager-iev-weak-security(48134)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48134"},{"name":"1021619","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021619"},{"name":"ADV-2009-0214","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/0214"},{"name":"33633","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33633"},{"name":"20090121 Cisco Security Manager Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-01-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain \"root access\" to IEV via unspecified use of TCP sessions to these ports."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"33381","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33381"},{"name":"cisco-securitymanager-iev-weak-security(48134)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48134"},{"name":"1021619","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021619"},{"name":"ADV-2009-0214","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/0214"},{"name":"33633","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33633"},{"name":"20090121 Cisco Security Manager Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2008-3820","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain \"root access\" to IEV via unspecified use of TCP sessions to these ports."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"33381","refsource":"BID","url":"http://www.securityfocus.com/bid/33381"},{"name":"cisco-securitymanager-iev-weak-security(48134)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48134"},{"name":"1021619","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021619"},{"name":"ADV-2009-0214","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/0214"},{"name":"33633","refsource":"SECUNIA","url":"http://secunia.com/advisories/33633"},{"name":"20090121 Cisco Security Manager Vulnerability","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2008-3820","datePublished":"2009-01-22T18:00:00.000Z","dateReserved":"2008-08-27T00:00:00.000Z","dateUpdated":"2024-08-07T09:52:59.866Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-01-22 18:30:03","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"7AC03BFB-10FA-4276-930F-DB450E89DCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"921F93B3-84A8-471B-9A3A-780C76BA3685"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"ADDFAFD3-DEC0-4C6E-BE75-921286A3B2FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.1.1:sp3:*:*:*:*:*:*","matchCriteriaId":"B2F46134-691C-4B96-87EE-6977E49905CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2:*:*:*:*:*:*:*","matchCriteriaId":"4686AD6B-CAB3-4CE5-9B13-D30613C614CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2:sp2:*:*:*:*:*:*","matchCriteriaId":"684784EB-A61E-4FBE-AC5F-AE7E69BD60A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7061A26C-4BC0-4466-99FE-60620BA45629"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:security_manager:3.2.1:sp1:*:*:*:*:*:*","matchCriteriaId":"E3EAAD49-6786-4E0A-B9E1-C3D0BD061132"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"3820","Ordinal":"1","Title":"CVE-2008-3820","CVE":"CVE-2008-3820","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"3820","Ordinal":"1","NoteData":"Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain \"root access\" to IEV via unspecified use of TCP sessions to these ports.","Type":"Description","Title":"CVE-2008-3820"},{"CveYear":"2008","CveId":"3820","Ordinal":"2","NoteData":"2009-01-22","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"3820","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}