CVE-2002-1095

3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.4%
top 39.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Secure Access Control ServerCisco VPN 3000 Concentrator Series Software
Timeline
PublishedOct 4
Latest updateApr 30

Description

Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cjp4-f2h8-jg69: Cisco VPN 3000 Concentrator before 2↗2022-04-30
▶
CVEList
CVE-2002-1095: Cisco VPN 3000 Concentrator before 2↗2004-09-01
▶