CVE-2002-1092

EPSS 0.53%
Published 04.10.2002 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Vpn 3000 Concentrator Series Software Version <= 3.6\(rel\)

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.53%	0.663

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml

Vendor Advisory

http://www.securityfocus.com/bid/5613

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/10017

https://nvd.nist.gov/vuln/detail/CVE-2002-1092

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-1092

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-1092

EUVD