CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
52.0%
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | vpn_5000_concentrator_series_software | * | cpe:2.3:o:cisco:vpn_5000_concentrator_series_software:*:*:*:*:*:*:*:* |
cisco | vpn_5000_concentrator | - | cpe:2.3:h:cisco:vpn_5000_concentrator:-:*:*:*:*:*:*:* |