Unscored severity · published Mar 30, 2005
CVE-2005-0943
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V3
Vpn 3000 Concentrator Series Software · Cisco
2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +32 more · source: NVD
V3
Vpn 3002 Hardware Client · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3005 Concentrator Software · Cisco
4.0.1 · source: NVD
V3
Vpn 3015 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3020 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3030 Concentator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3060 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3080 Concentrator · Cisco
All versions, or not specified · source: NVD
Affected product
V3
Vpn 3000 Concentrator Series Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0943
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0943
Patch
http://secunia.com/advisories/14784
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml
Patch
http://www.securityfocus.com/bid/12948
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/19903
More from Vpn 3000 Concentrator Series Software
–
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2)…
–
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA),…
–
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted…
–
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…