Unscored severity · published Jun 18, 2001
CVE-2001-0427
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V3
Vpn 3000 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3005 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3015 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3030 Concentator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3060 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3080 Concentrator · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0427
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0427
Patch
http://www.cisco.com/warp/public/707/vpn3k-telnet-vuln-pub.shtml
www.osvdb.org
http://www.osvdb.org/5643
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6298
More from Vpn 3000 Concentrator
–
CVE-2010-4354
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000…
–
CVE-2005-2025
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which…