Lucene search

[email protected]CVE-2001-0427

HistoryJun 18, 2001 - 4:00 a.m.

CVE-2001-0427

2001-06-1804:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

vpn 3000 series

dos

vulnerability

invalid login

remote attackers

7 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

79.0%

JSON

Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.

CPENameOperatorVersion
cisco:vpn_3015_concentratorcisco vpn 3015 concentratoreq*
cisco:vpn_3060_concentratorcisco vpn 3060 concentratoreq*
cisco:vpn_3000_concentratorcisco vpn 3000 concentratoreq*
cisco:vpn_3005_concentratorcisco vpn 3005 concentratoreq*
cisco:vpn_3030_concentatorcisco vpn 3030 concentatoreq*
cisco:vpn_3080_concentratorcisco vpn 3080 concentratoreq*

CPE	Name	Operator	Version
cisco:vpn_3015_concentrator	cisco vpn 3015 concentrator	eq	*
cisco:vpn_3060_concentrator	cisco vpn 3060 concentrator	eq	*
cisco:vpn_3000_concentrator	cisco vpn 3000 concentrator	eq	*
cisco:vpn_3005_concentrator	cisco vpn 3005 concentrator	eq	*
cisco:vpn_3030_concentator	cisco vpn 3030 concentator	eq	*
cisco:vpn_3080_concentrator	cisco vpn 3080 concentrator	eq	*

References

www.cisco.com/warp/public/707/vpn3k-telnet-vuln-pub.shtml

www.osvdb.org/5643

exchange.xforce.ibmcloud.com/vulnerabilities/6298

7 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.006 Low

EPSS

Percentile

79.0%

JSON

Related for CVE-2001-0427

nessus1