Vulnerability in Cisco Vpn 5000 Concentrator
CVE-2002-0848
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
EPSS: 0.021 (80.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Vpn_5000_concentrator
- Cisco Vpn_5000_concentrator_series_software
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_XF)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)