CVE-2008-3815: Cisco ASA 5500

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1 before 8.1(1)13, when configured as a VPN using Microsoft Windows NT Domain authentication, allows remote attackers to bypass VPN authentication via unknown vectors.

Affected products

• Cisco ASA 5500: any version
• Cisco Pix: version 7.0 only; version 7.1 only; version 7.2 only; version 8.0 only; version 8.1 only

Published 2008-10-23. Last modified 2026-06-16.