Description
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
References (3)
Core 3
Core References
Various Sources third-party-advisory
government-resource
x_refsource_ciac
http://ciac.llnl.gov/ciac/bulletins/i-056.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/1579
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/770/pixkey-pub.shtml
Scores
EPSS
0.0136
EPSS Percentile
68.9%
Details
Status
published
Products (1)
cisco/pix_private_link
< 4.1\(6\)
Published
Dec 31, 1999
Tracked Since
Feb 18, 2026