exploitDog

CVE-2001-0427

Опубликовано: 18 июн. 2001

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:cisco:vpn_3000_concentrator:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:vpn_3005_concentrator:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00855

Низкий

7.1 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-6868-m557-3x86

github

больше 3 лет назад

Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.

EPSS

Процентиль: 74%

0.00855

Низкий

7.1 High

CVSS2

Дефекты

CWE-20