Vulnerability in Cisco iOS
CVE-2005-1058
Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.
EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ios — versions 12.2t, 12.3, 12.3t
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)