CVE-2007-0397

CVSS 6.4 - MEDIUM

Description

The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public keys when connecting to devices, which allows remote attackers to spoof those devices to obtain sensitive information or generate incorrect information.

Affected Products

2

Vendor	Product	Version
cisco	security_monitoring_analysis_and_response_system	`4.2.3`
cisco	adaptive_security_appliance_device_manager	`5.2.53`

References

http://osvdb.org/32720

http://secunia.com/advisories/23836

http://securitytracker.com/id?1017535

http://securitytracker.com/id?1017536

http://www.cisco.com/en/US/products/products_secur...

http://www.securityfocus.com/bid/22111

http://www.vupen.com/english/advisories/2007/0245

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://osvdb.org/32720

http://secunia.com/advisories/23836

http://securitytracker.com/id?1017535

http://securitytracker.com/id?1017536

http://www.cisco.com/en/US/products/products_secur...

http://www.securityfocus.com/bid/22111

http://www.vupen.com/english/advisories/2007/0245

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

NVD-CWE-Other

CVE Information

CVE ID:: CVE-2007-0397
Published:: 2007-01-20
Modified:: 2026-04-23
CVSS Score:: 6.4
Severity:: MEDIUM
Vector:: AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected Vendors

cisco

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL