CVE-2003-0258

high

Description

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/11954

http://www.kb.cert.org/vuls/id/727780

http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml

Details

Source: Mitre, NVD

Published: 2003-05-27

Updated: 2018-10-30

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3