Unscored severity · published Aug 23, 2006
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2)…
–
CVSS
12%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.0% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
V3
Vpn 3000 Concentrator Series Software · Cisco
4.0; 4.0.1; 4.0.5.b; 4.1.5.b; 4.1.7.a; 4.1.7.b; +5 more · source: NVD
Affected product
V3
Vpn 3000 Concentrator Series Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4313
secunia.com
http://secunia.com/advisories/21617
securitytracker.com
http://securitytracker.com/id?1016737
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtml
www.osvdb.org
http://www.osvdb.org/28138
www.osvdb.org
http://www.osvdb.org/28139
www.securityfocus.com
http://www.securityfocus.com/bid/19680
More from Vpn 3000 Concentrator Series Software
–
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA),…
–
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted…
–
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…
–
CVE-2005-3669
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service…