CVE-2002-1092
Cisco VPN 3000 Concentrator Series Software < 3.6(rel) - Unauthenticated VPN Access via Internal Group Authentication
Title source: llmDescription
Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10017
Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5613
Scores
EPSS
0.0140
EPSS Percentile
69.6%
Details
Status
published
Products (1)
cisco/vpn_3000_concentrator_series_software
< 3.6\(rel\)
Published
Oct 04, 2002
Tracked Since
Feb 18, 2026