Lucene search

MitreCVE-2003-0258

HistoryMay 27, 2003 - 4:00 a.m.

CVE-2003-0258

2003-05-2704:00:00

mitre

web.nvd.nist.gov

cisco

vpn

cisco vpn 3000

concentrators

hardware client

ipsec

tcp

vulnerability

authentication

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.008

Percentile

81.4%

JSON

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.

Affected configurations

Nvd

Node

ciscovpn_3015_concentrator

ciscovpn_3030_concentator

ciscovpn_3060_concentrator

ciscovpn_3080_concentrator

ciscovpn_3000_concentrator_series_softwareMatch3.5\(rel\)

ciscovpn_3000_concentrator_series_softwareMatch3.5.1

ciscovpn_3000_concentrator_series_softwareMatch3.5.2

ciscovpn_3000_concentrator_series_softwareMatch3.5.3

ciscovpn_3000_concentrator_series_softwareMatch3.5.4

ciscovpn_3000_concentrator_series_softwareMatch3.5.5

ciscovpn_3000_concentrator_series_softwareMatch3.6

ciscovpn_3000_concentrator_series_softwareMatch3.6.1

ciscovpn_3000_concentrator_series_softwareMatch3.6.3

ciscovpn_3000_concentrator_series_softwareMatch3.6.5

ciscovpn_3000_concentrator_series_softwareMatch3.6.7

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.a

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.b

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.c

ciscovpn_3000_concentrator_series_softwareMatch3.6.7.d

ciscovpn_3000_concentrator_series_softwareMatch3.6.7d

ciscovpn_3000_concentrator_series_softwareMatch4.0

ciscovpn_3005_concentrator_softwareMatch4.0.1

AND

ciscovpn_3002_hardware_client

VendorProductVersionCPE
ciscovpn_3015_concentrator*cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*
ciscovpn_3030_concentator*cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*
ciscovpn_3060_concentrator*cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*
ciscovpn_3080_concentrator*cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*
ciscovpn_3000_concentrator_series_software3.5(rel)cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\(rel\):*:*:*:*:*:*:*
ciscovpn_3000_concentrator_series_software3.5.1cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*
ciscovpn_3000_concentrator_series_software3.5.2cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*
ciscovpn_3000_concentrator_series_software3.5.3cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*
ciscovpn_3000_concentrator_series_software3.5.4cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*
ciscovpn_3000_concentrator_series_software3.5.5cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	vpn_3015_concentrator	*	cpe:2.3:h:cisco:vpn_3015_concentrator::::::::
cisco	vpn_3030_concentator	*	cpe:2.3:h:cisco:vpn_3030_concentator::::::::
cisco	vpn_3060_concentrator	*	cpe:2.3:h:cisco:vpn_3060_concentrator::::::::
cisco	vpn_3080_concentrator	*	cpe:2.3:h:cisco:vpn_3080_concentrator::::::::
cisco	vpn_3000_concentrator_series_software	3.5(rel)	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\(rel\):::::::*
cisco	vpn_3000_concentrator_series_software	3.5.1	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.2	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.3	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.4	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:::::::*
cisco	vpn_3000_concentrator_series_software	3.5.5	cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:::::::*

Rows per page:

1-10 of 231

References

www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml

www.kb.cert.org/vuls/id/727780

exchange.xforce.ibmcloud.com/vulnerabilities/11954

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.008

Percentile

81.4%

JSON

Related for CVE-2003-0258