CVE-2003-0258

Published May 27, 2003

Last updated 6 years ago

Overview

Description: Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A512328-2FD0-4B1D-9327-A13A0BCE9C0D"
          },
          {
            "criteria": "cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6548F964-B8EE-4B39-87CF-99743D41C42C"
          },
          {
            "criteria": "cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E08810E6-33B6-45FF-91C7-EED10DC023EA"
          },
          {
            "criteria": "cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2BD1A1AC-980F-428E-8BAF-0FC821014868"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "207034E8-35F7-4E78-A3FC-C86D20EB8D9A"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C544E523-15E5-4CE5-8113-53454F5D9973"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B09F6EBD-C3FC-4680-BE31-A766D863237D"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DF8C3FDA-D321-4202-A8EA-6C1464558A8F"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B68705AB-A133-401F-9F41-64594E071816"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F9092680-E154-4EAB-A2D5-B692073F894E"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8EF5F3FA-5FA4-408E-BA62-3943C5DFD859"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ADFC9764-5BF5-449F-9200-5569C13F8309"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F12F2AAC-DB5B-4C28-86C5-F59490362E54"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "071F52AD-D59B-4673-BCBE-112B94D3EB66"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "80709CB0-D386-4C4F-B3EE-7A0501FD7248"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.a:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B2AFAF42-B894-4D62-A9CF-3349A43191AF"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.b:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ABE5BB7F-D8B4-441B-9F45-56F622EEAA52"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.c:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8B87A7EC-DC23-4075-8C4A-2317FF34BDB1"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7.d:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "98AC18E3-D12B-489D-9D95-6C9210235FB3"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6.7d:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "36291ADE-3D5A-4E49-8BA7-B71CAAA226B9"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D953DA9F-B54E-4941-85BE-48933C98DB55"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vpn_3005_concentrator_software:4.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17196F00-9D7A-4AF6-AE1E-EA2E450A8ABD"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "12ECF578-84BF-4F41-9462-C09FA517F2A0"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References