Unscored severity · published May 27, 2003
CVE-2003-0258
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V3
Vpn 3000 Concentrator Series Software · Cisco
3.5(rel); 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +11 more · source: NVD
V3
Vpn 3002 Hardware Client · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3005 Concentrator Software · Cisco
4.0.1 · source: NVD
V3
Vpn 3015 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3030 Concentator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3060 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3080 Concentrator · Cisco
All versions, or not specified · source: NVD
Affected product
V3
Vpn 3000 Concentrator Series Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0258
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0258
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml
US Government Resource
http://www.kb.cert.org/vuls/id/727780
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
More from Vpn 3000 Concentrator Series Software
–
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2)…
–
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA),…
–
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted…
–
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…