Vulnerability in Cisco Vpn_3000_concentrator_series_software
CVE-2003-0258
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
EPSS: 0.022 (80.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Vpn_3000_concentrator_series_software — versions 3.5\(rel\), 3.5.1, 3.5.2
- Cisco Vpn_3002_hardware_client
- Cisco Vpn_3005_concentrator_software — versions 4.0.1
- Cisco Vpn_3015_concentrator
- Cisco Vpn_3030_concentator
- Cisco Vpn_3060_concentrator
- Cisco Vpn_3080_concentrator
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)