Description (CNA)
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.kb.cert.org/vuls/id/727780
- http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
ADP enrichment
No English description supplied.