CVE-2008-3815
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.
Key facts
- CVSS score
- 4.3 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:M/Au:N/C:P/I:N/A:N- Weakness (CWE)
- CWE-287
- EPSS score
- 1.5% (75th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2008-3801)
- Published
- October 23, 2008
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2008-3801 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / asa 5500
- cisco / pix
- cisco / pix
- cisco / pix
- cisco / pix
- cisco / pix
Certified products that may be affected
4 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Cisco FTD (NGFW) 7.0 on ASA 5500 and ISA 3000 and FTDv with FMC/FMCv - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11300-2023 - archived
- Cisco Adaptive Security Appliances (ASA) 5500-X, Industrial Security Appliances (ISA) 3000 and Adaptive Security Appliances Virtual (ASAv) Version 9.16 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11257-2022 - archived
- Cisco Adaptive Security Appliances (ASA) 5500, Industrial Security Appliances (ISA) 3000 and Adaptive Security Appliances Virtual (ASAv) Version 9.12 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11102-2021 - archived
- Cisco Intrusion Prevention System Version: Software Version 7.2(1) Components: IPS 4300 and 4500 series sensors (4345, 4360, 4510, and 4520); IPS hardware modules for ASA 5585-X (IPS SSP-10, SSP-20, SSP-40, and SSP-60); and IPS software modules on ASA 5500-X (ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X). - Cisco Systems, Inc. - Common Criteria Certificate Number: 2013/84 - archived
References
- http://secunia.com/advisories/32360
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a183ba.shtml
- http://www.securityfocus.com/bid/31864
- http://www.securitytracker.com/id?1021089
- http://www.securitytracker.com/id?1021090
- http://www.vupen.com/english/advisories/2008/2899
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46024
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5983
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain