Lucene search

K
cve[email protected]CVE-2002-2225
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2225

2022-10-0316:23:49
web.nvd.nist.gov
19
safenet
vpn
vulnerability
denial of service
arbitrary code execution
ike
nvd

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.

Affected configurations

NVD
Node
safenetsoftremote_vpn_client

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

Related for CVE-2002-2225