Vulnerability in Cisco Pix_firewall

CVE-2003-1004

Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request to the outside interface of the firewall.

EPSS: 0.013 (66.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Pix_firewall — versions 6.2.2_.111
Cisco Pix_firewall_software — versions 6.2, 6.2\(1\), 6.2\(2\)
N/a — versions n/a

References

cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)