Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.

The remote VPN concentrator has a vulnerability in its PPTP client. This vulnerability is documented as Cisco bug ID CSCdv66718.

The remote VPN concentrator is vulnerable to an internal PPTP / IPSEC authentication login vulnerability. This vulnerability is documented as Cisco bug ID CSCdt56514.

The remote VPN concentrator has a bug in its PPTP client.

This vulnerability is documented as Cisco bug ID CSCdv66718.

The remote VPN concentrator is vulnerable to an internal PPTP / IPSEC authentication login attack. 

This vulnerability is documented as Cisco bug ID CSCdt56514.

ID	Name	Product	Family	Severity
2224	Cisco VPN Concentrator PPTP Multiple Vulnerabilities (Bug ID CSCdv66718)	Nessus Network Monitor	SNMP	high
2223	Cisco VPN Concentrator PPTP Multiple Vulnerabilities (Bug ID CSCdv66718)	Nessus Network Monitor	SNMP	high
2222	Cisco VPN Concentrator PPTP Multiple Vulnerabilities (Bug ID CSCdv66718)	Nessus Network Monitor	SNMP	high
2209	Cisco PPTP Authentication Bypass / DoS (Bug ID CSCdt56514)	Nessus Network Monitor	SNMP	high
2208	Cisco PPTP Authentication Bypass / DoS (Bug ID CSCdt56514)	Nessus Network Monitor	SNMP	high
2207	Cisco PPTP Authentication Bypass / DoS (Bug ID CSCdt56514)	Nessus Network Monitor	SNMP	high
11291	Cisco VPN 3000 Concentrator PPTP/IPSEC Group Credential Authentication Bypass (CSCdv66718)	Nessus	CISCO	high
11287	Cisco VPN 3000 Concentrator Multiple Vulnerabilities (CSCdt56514, CSCdv66718)	Nessus	CISCO	high

Detections

Analytics

CVE-2002-1092

critical

Tenable Plugins

high

high

high

high

high

high

high

high