CVE-2010-4354
Cisco ASA 5500, PIX 500, and VPN 3000 Series - Group Name Enumeration via IKE Aggressive Mode
Title source: llmDescription
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html
Scores
EPSS
0.0159
EPSS Percentile
72.7%
Details
CWE
CWE-200
Status
published
Products (9)
cisco/asa_5500
cisco/pix_500
cisco/vpn_3000_concentrator
cisco/vpn_3005_concentrator
cisco/vpn_3015_concentrator
cisco/vpn_3020_concentrator
cisco/vpn_3030_concentator
cisco/vpn_3060_concentrator
cisco/vpn_3080_concentrator
Published
Nov 30, 2010
Tracked Since
Feb 18, 2026