Description
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10046
Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5653
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml
Scores
EPSS
0.0181
EPSS Percentile
76.4%
Details
Status
published
Products (7)
cisco/vpn_client
2.0
cisco/vpn_client
3.0
cisco/vpn_client
3.0.5
cisco/vpn_client
3.1
cisco/vpn_client
3.5.1 (4 CPE variants)
cisco/vpn_client
3.5.1c
cisco/vpn_client
3.5.2 (4 CPE variants)
Published
Oct 04, 2002
Tracked Since
Feb 18, 2026