high7.5
CVE-2003-0258
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allo…
Impact
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Vpn 3015 Concentrator | All versions |
| Cisco | Vpn 3030 Concentator | All versions |
| Cisco | Vpn 3060 Concentrator | All versions |
| Cisco | Vpn 3080 Concentrator | All versions |
| Cisco | Vpn 3000 Concentrator Series Software | Versions 3.5\(rel\), 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5 |
| Cisco | Vpn 3005 Concentrator Software | Version 4.0.1 |
| Cisco | Vpn 3002 Hardware Client | All versions |
References
- NVD record
- CVE.org record
- http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml
- http://www.kb.cert.org/vuls/id/727780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
- http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml
- http://www.kb.cert.org/vuls/id/727780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11954