Unscored severity · published Oct 4, 2002
CVE-2002-1099
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V3
Vpn 3000 Concentrator Series Software · Cisco
2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +13 more · source: NVD
V3
Vpn 3002 Hardware Client · Cisco
All versions, or not specified · source: NVD
Affected product
V3
Vpn 3000 Concentrator Series Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1099
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1099
Vendor Advisory
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Vendor Advisory
http://www.iss.net/security_center/static/10024.php
www.securityfocus.com
http://www.securityfocus.com/bid/5616
More from Vpn 3000 Concentrator Series Software
–
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2)…
–
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA),…
–
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted…
–
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…