CVE-2009-2977: Cisco Cs-Mars

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.

Affected products

• Cisco Cs-Mars: up to and including 6.0.4; version 4.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.5 only

Published 2009-08-27. Last modified 2026-06-16.