Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vpn 3000 concentrator vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2005-2025
Cisco VPN 3000 Concentrator prior to 4.1.7.F allows remote malicious users to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an inva...
Cisco Vpn 3020 ConcentratorCisco Vpn 3030 ConcentatorCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.1.2Cisco Vpn 3000 Concentrator Series Software 3.1.4Cisco Vpn 3000 Concentrator Series Software 3.6.7Cisco Vpn 3000 Concentrator Series Software 3.6.7dCisco Vpn 3000 Concentrator Series Software 4.1.7.bCisco Vpn 3000 Concentrator Series Software 3.6.3Cisco Vpn 3000 Concentrator Series Software 3.6.7.fCisco Vpn 3000 Concentrator Series Software 2.0Cisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 3.0.3.bCisco Vpn 3000 Concentrator Series Software 3.0.4Cisco Vpn 3000 Concentrator Series Software 3.5.2Cisco Vpn 3000 Concentrator Series Software 3.5.3Cisco Vpn 3000 Concentrator Series Software 4.0.5.bCisco Vpn 3000 Concentrator Series Software 4.1Cisco Vpn 3000 Concentrator Series Software 3.6.7.aCisco Vpn 3000 Concentrator Series Software 3.6.7.bCisco Vpn 3060 Concentrator
2.6
CVSSv2
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote malicious users to inject arbitrary web script or HTML v...
Cisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.1.1Cisco Vpn 3000 Concentrator Series Software 3.1.2Cisco Vpn 3000 Concentrator Series Software 3.5.5Cisco Vpn 3000 Concentrator Series Software 3.6Cisco Vpn 3000 Concentrator Series Software 4.1.5.bCisco Vpn 3000 Concentrator Series Software 4.1.7.aCisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 2.5.2.bCisco Vpn 3000 Concentrator Series Software 3.1Cisco Vpn 3000 Concentrator Series Software 3.1\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 3.5.3Cisco Vpn 3000 Concentrator Series Software 3.5.4Cisco Vpn 3000 Concentrator Series Software 4.0.1Cisco Vpn 3000 Concentrator Series Software 4.0.5.bCisco Vpn 3000 Concentrator Series Software 4.1Cisco Asa 5500 7.0Cisco Asa 5500 7.0\\(4\\)Cisco Vpn 3000 Concentrator Series Software 3.0Cisco Vpn 3000 Concentrator Series Software 3.0.3.a
5
CVSSv2
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators prior to 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow malicious users to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delet...
Cisco Vpn 3000 Concentrator Series Software 4.1.7.aCisco Vpn 3000 Concentrator Series Software 4.1.7.bCisco Vpn 3000 Concentrator Series Software 4.0Cisco Vpn 3000 Concentrator Series Software 4.0.1Cisco Vpn 3000 Concentrator Series Software 4.7.1Cisco Vpn 3000 Concentrator Series Software 4.7.1.fCisco Vpn 3000 Concentrator Series Software 4.1.7.lCisco Vpn 3000 Concentrator Series Software 4.7Cisco Vpn 3000 Concentrator Series Software 4.0.5.bCisco Vpn 3000 Concentrator Series Software 4.1.5.bCisco Vpn 3000 Concentrator Series Software 4.7.2.f
5
CVSSv2
CVE-2002-1093
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x prior to 3.0.3(B) allows remote malicious users to cause a denial of service (CPU consumption) via a long URL request.
Cisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.0Cisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 3.0.3.aCisco Vpn 3000 Concentrator Series Software 2.0Cisco Vpn 3000 Concentrator Series Software 2.5.2.bCisco Vpn 3000 Concentrator Series Software 3.0\\(rel\\)
5
CVSSv2
CVE-2001-0428
Cisco VPN 3000 series concentrators prior to 2.5.2(F) allow remote malicious users to cause a denial of service via an IP packet with an invalid IP option.
Cisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 2.5.2.b
7.8
CVSSv2
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 up to and including 4.7.2.A allow remote malicious users to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet.
Cisco Vpn 3000 Concentrator Series Software 4.7.1.fCisco Vpn 3000 Concentrator Series Software 4.7.2Cisco Vpn 3030 Concentator 4.7.1Cisco Vpn 3030 Concentator 4.7.1.fCisco Vpn 3000 Concentrator Series Software 4.7.2.aCisco Vpn 3030 Concentator 4.7.2Cisco Vpn 3030 Concentator 4.7.2.aCisco Vpn 3000 Concentrator Series Software 4.7\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 4.7.1Cisco Vpn 3030 Concentator 4.7\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 4.7
7.1
CVSSv2
CVE-2001-0427
Cisco VPN 3000 series concentrators prior to 2.5.2(F) allow remote malicious users to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.
Cisco Vpn 3030 ConcentatorCisco Vpn 3060 ConcentratorCisco Vpn 3005 ConcentratorCisco Vpn 3015 ConcentratorCisco Vpn 3000 ConcentratorCisco Vpn 3080 Concentrator
5
CVSSv2
CVE-2010-4354
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configu...
Cisco Asa 5500Cisco Pix 500Cisco Vpn 3005 ConcentratorCisco Vpn 3080 ConcentratorCisco Vpn 3000 ConcentratorCisco Vpn 3020 ConcentratorCisco Vpn 3060 ConcentratorCisco Vpn 3015 ConcentratorCisco Vpn 3030 Concentator
7.5
CVSSv2
CVE-2002-1092
Cisco VPN 3000 Concentrator 3.6(Rel) and previous versions, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.
Cisco Vpn 3000 Concentrator Series Software
5
CVSSv2
CVE-2005-3669
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote malicious users to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suit...
Cisco Firewall Services ModuleCisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Cisco Firewall Services Module 1.1 \\(3.005\\)Cisco Firewall Services Module 2.1 \\(0.208\\)Cisco Vpn 3000 Concentrator Series Software 2.5.2.bCisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.0Cisco Vpn 3000 Concentrator Series Software 3.5.2Cisco Vpn 3000 Concentrator Series Software 3.5.3Cisco Vpn 3000 Concentrator Series Software 3.5.4Cisco Vpn 3000 Concentrator Series Software 3.5.5Cisco Vpn 3000 Concentrator Series Software 4.1.5.bCisco Vpn 3000 Concentrator Series Software 4.1.7.aCisco Vpn 3000 Concentrator Series Software 4.1.7.bCisco Vpn 3000 Concentrator Series Software 4.7.1Cisco Vpn 3000 Concentrator Series Software 4.7.1.fCisco Vpn 3000 Concentrator Series Software 3.1Cisco Vpn 3000 Concentrator Series Software 3.1\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 3.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook