V3
Product
Vpn 3000 Concentrator Series Software
by Cisco · last CVE Aug 23, 2006
24
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Vpn 3000 Concentrator Series Software to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2006-4313
–
12%
Aug 23
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2)…
Affected: 4.0; 4.0.1; 4.0.5.b; 4.1.5.b; 4.1.7.a; 4.1.7.b; +5 more
CVE-2006-3906
–
7%
Jul 27
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +34 more
CVE-2006-3073
–
2%
Jun 19
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA),…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +29 more
CVE-2006-0483
–
3%
Jan 31
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted…
Affected: 4.7; 4.7(rel); 4.7.1; 4.7.1.f; 4.7.2; 4.7.2.a
CVE-2005-4499
–
3%
Dec 22
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +34 more
CVE-2005-3669
–
5%
Nov 18
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +27 more
CVE-2005-2025
–
2%
Jun 20
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +31 more
CVE-2005-0943
–
2%
Mar 30
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +32 more
CVE-2003-0258
–
2%
May 27
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers…
Affected: 3.5(rel); 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +11 more
CVE-2003-0260
–
2%
May 27
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +20 more
CVE-2003-0259
–
2%
May 27
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +25 more
CVE-2002-1102
–
2%
Oct 4
The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +14 more
CVE-2002-1103
–
1%
Oct 4
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +16 more
CVE-2002-1092
–
1%
Oct 4
Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN…
Affected: through 3.6\(rel\)
CVE-2002-1093
–
2%
Oct 4
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +3 more
CVE-2002-1094
–
2%
Oct 4
Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +13 more
CVE-2002-1095
–
1%
Oct 4
Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d
CVE-2002-1096
–
1%
Oct 4
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +10 more
CVE-2002-1097
–
1%
Oct 4
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +10 more
CVE-2002-1098
–
1%
Oct 4
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +13 more
CVE-2002-1099
–
2%
Oct 4
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +13 more
CVE-2002-1100
–
2%
Oct 4
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login…
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +13 more
CVE-2002-1101
–
3%
Oct 4
Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name
Affected: 2.0; 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d; 2.5.2.f; +16 more
CVE-2001-0428
–
2%
Jul 2
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option
Affected: 2.5.2.a; 2.5.2.b; 2.5.2.c; 2.5.2.d
Showing 24