Unscored severity · published Jan 20, 2007
CVE-2007-0397
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS…
–
CVSS
2.9%
EPSS
No
On KEV
Description
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Adaptive Security Appliance Device Manager · Cisco
5.2.53 · source: NVD
SM
Security Monitoring Analysis And Response System · Cisco
4.2.3 · source: NVD
Affected product
AS
Adaptive Security Appliance Device Manager
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0397
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0397
osvdb.org
http://osvdb.org/32720
secunia.com
http://secunia.com/advisories/23836
securitytracker.com
http://securitytracker.com/id?1017535
securitytracker.com
http://securitytracker.com/id?1017536
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a00807c517f.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/22111
More from Adaptive Security Appliance Device Manager
7.5
CVE-2019-1715
A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and…
–
CVE-2013-1192
The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary…