Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vpn 3000 concentrator series software vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2005-2025
Cisco VPN 3000 Concentrator prior to 4.1.7.F allows remote malicious users to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an inva...
Cisco Vpn 3020 ConcentratorCisco Vpn 3030 ConcentatorCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.1.2Cisco Vpn 3000 Concentrator Series Software 3.1.4Cisco Vpn 3000 Concentrator Series Software 3.6.7Cisco Vpn 3000 Concentrator Series Software 3.6.7dCisco Vpn 3000 Concentrator Series Software 4.1.7.bCisco Vpn 3000 Concentrator Series Software 3.6.3Cisco Vpn 3000 Concentrator Series Software 3.6.7.fCisco Vpn 3000 Concentrator Series Software 2.0Cisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 3.0.3.bCisco Vpn 3000 Concentrator Series Software 3.0.4Cisco Vpn 3000 Concentrator Series Software 3.5.2Cisco Vpn 3000 Concentrator Series Software 3.5.3Cisco Vpn 3000 Concentrator Series Software 4.0.5.bCisco Vpn 3000 Concentrator Series Software 4.1Cisco Vpn 3000 Concentrator Series Software 3.6.7.aCisco Vpn 3000 Concentrator Series Software 3.6.7.bCisco Vpn 3060 Concentrator
2.6
CVSSv2
CVE-2006-3073
Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote malicious users to inject arbitrary web script or HTML v...
Cisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.1.1Cisco Vpn 3000 Concentrator Series Software 3.1.2Cisco Vpn 3000 Concentrator Series Software 3.5.5Cisco Vpn 3000 Concentrator Series Software 3.6Cisco Vpn 3000 Concentrator Series Software 4.1.5.bCisco Vpn 3000 Concentrator Series Software 4.1.7.aCisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 2.5.2.bCisco Vpn 3000 Concentrator Series Software 3.1Cisco Vpn 3000 Concentrator Series Software 3.1\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 3.5.3Cisco Vpn 3000 Concentrator Series Software 3.5.4Cisco Vpn 3000 Concentrator Series Software 4.0.1Cisco Vpn 3000 Concentrator Series Software 4.0.5.bCisco Vpn 3000 Concentrator Series Software 4.1Cisco Asa 5500 7.0Cisco Asa 5500 7.0\\(4\\)Cisco Vpn 3000 Concentrator Series Software 3.0Cisco Vpn 3000 Concentrator Series Software 3.0.3.a
5
CVSSv2
CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators prior to 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow malicious users to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delet...
Cisco Vpn 3000 Concentrator Series Software 4.1.7.aCisco Vpn 3000 Concentrator Series Software 4.1.7.bCisco Vpn 3000 Concentrator Series Software 4.0Cisco Vpn 3000 Concentrator Series Software 4.0.1Cisco Vpn 3000 Concentrator Series Software 4.7.1Cisco Vpn 3000 Concentrator Series Software 4.7.1.fCisco Vpn 3000 Concentrator Series Software 4.1.7.lCisco Vpn 3000 Concentrator Series Software 4.7Cisco Vpn 3000 Concentrator Series Software 4.0.5.bCisco Vpn 3000 Concentrator Series Software 4.1.5.bCisco Vpn 3000 Concentrator Series Software 4.7.2.f
5
CVSSv2
CVE-2002-1093
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x prior to 3.0.3(B) allows remote malicious users to cause a denial of service (CPU consumption) via a long URL request.
Cisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.0Cisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 3.0.3.aCisco Vpn 3000 Concentrator Series Software 2.0Cisco Vpn 3000 Concentrator Series Software 2.5.2.bCisco Vpn 3000 Concentrator Series Software 3.0\\(rel\\)
5
CVSSv2
CVE-2001-0428
Cisco VPN 3000 series concentrators prior to 2.5.2(F) allow remote malicious users to cause a denial of service via an IP packet with an invalid IP option.
Cisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.aCisco Vpn 3000 Concentrator Series Software 2.5.2.b
7.8
CVSSv2
CVE-2006-0483
Cisco VPN 3000 series concentrators running software 4.7.0 up to and including 4.7.2.A allow remote malicious users to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet.
Cisco Vpn 3000 Concentrator Series Software 4.7.1.fCisco Vpn 3000 Concentrator Series Software 4.7.2Cisco Vpn 3030 Concentator 4.7.1Cisco Vpn 3030 Concentator 4.7.1.fCisco Vpn 3000 Concentrator Series Software 4.7.2.aCisco Vpn 3030 Concentator 4.7.2Cisco Vpn 3030 Concentator 4.7.2.aCisco Vpn 3000 Concentrator Series Software 4.7\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 4.7.1Cisco Vpn 3030 Concentator 4.7\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 4.7
7.5
CVSSv2
CVE-2002-1092
Cisco VPN 3000 Concentrator 3.6(Rel) and previous versions, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.
Cisco Vpn 3000 Concentrator Series Software
5
CVSSv2
CVE-2010-4354
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configu...
Cisco Asa 5500Cisco Pix 500Cisco Vpn 3005 ConcentratorCisco Vpn 3080 ConcentratorCisco Vpn 3000 ConcentratorCisco Vpn 3020 ConcentratorCisco Vpn 3060 ConcentratorCisco Vpn 3015 ConcentratorCisco Vpn 3030 Concentator
5
CVSSv2
CVE-2005-3669
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote malicious users to cause a denial of service (device reset) via certain malformed IKE packets, as demonstrated by the PROTOS ISAKMP Test Suit...
Cisco Firewall Services ModuleCisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Cisco Firewall Services Module 1.1 \\(3.005\\)Cisco Firewall Services Module 2.1 \\(0.208\\)Cisco Vpn 3000 Concentrator Series Software 2.5.2.bCisco Vpn 3000 Concentrator Series Software 2.5.2.cCisco Vpn 3000 Concentrator Series Software 2.5.2.dCisco Vpn 3000 Concentrator Series Software 2.5.2.fCisco Vpn 3000 Concentrator Series Software 3.0Cisco Vpn 3000 Concentrator Series Software 3.5.2Cisco Vpn 3000 Concentrator Series Software 3.5.3Cisco Vpn 3000 Concentrator Series Software 3.5.4Cisco Vpn 3000 Concentrator Series Software 3.5.5Cisco Vpn 3000 Concentrator Series Software 4.1.5.bCisco Vpn 3000 Concentrator Series Software 4.1.7.aCisco Vpn 3000 Concentrator Series Software 4.1.7.bCisco Vpn 3000 Concentrator Series Software 4.7.1Cisco Vpn 3000 Concentrator Series Software 4.7.1.fCisco Vpn 3000 Concentrator Series Software 3.1Cisco Vpn 3000 Concentrator Series Software 3.1\\(rel\\)Cisco Vpn 3000 Concentrator Series Software 3.1.1
5
CVSSv2
CVE-2002-0848
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and previous versions, and 5.2.23.0003 and previous versions, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request...
Cisco Vpn 5000 Concentrator Series Software
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook