Description
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
References (3)
Core 3
Core References
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/727780
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
Scores
EPSS
0.0216
EPSS Percentile
80.3%
Details
Status
published
Products (23)
cisco/vpn_3000_concentrator_series_software
3.5\(rel\)
cisco/vpn_3000_concentrator_series_software
3.5.1
cisco/vpn_3000_concentrator_series_software
3.5.2
cisco/vpn_3000_concentrator_series_software
3.5.3
cisco/vpn_3000_concentrator_series_software
3.5.4
cisco/vpn_3000_concentrator_series_software
3.5.5
cisco/vpn_3000_concentrator_series_software
3.6
cisco/vpn_3000_concentrator_series_software
3.6.1
cisco/vpn_3000_concentrator_series_software
3.6.3
cisco/vpn_3000_concentrator_series_software
3.6.5
... and 13 more
Published
May 27, 2003
Tracked Since
Feb 18, 2026