Lucene search

K
cve[email protected]CVE-2002-1092
HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1092

2004-09-0104:00:00
web.nvd.nist.gov
16
cisco
vpn
concentrator
authentication
pptp
ipsec
vulnerability

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.4%

Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.

Affected configurations

NVD
Node
ciscovpn_3000_concentrator_series_softwareRange3.6\(rel\)

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.4%

Related for CVE-2002-1092