Unscored severity · published Oct 4, 2002
CVE-2002-1097
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V3
Vpn 3000 Concentrator Series Software · Cisco
2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +10 more · source: NVD
V3
Vpn 3002 Hardware Client · Cisco
All versions, or not specified · source: NVD
Affected product
V3
Vpn 3000 Concentrator Series Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1097
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1097
Vendor Advisory
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Vendor Advisory
http://www.iss.net/security_center/static/10022.php
www.securityfocus.com
http://www.securityfocus.com/bid/5612
More from Vpn 3000 Concentrator Series Software
–
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2)…
–
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA),…
–
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted…
–
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…