Vulnerability Description
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Vpn 3015 Concentrator | All versions |
| Cisco | Vpn 3030 Concentator | All versions |
| Cisco | Vpn 3060 Concentrator | All versions |
| Cisco | Vpn 3080 Concentrator | All versions |
| Cisco | Vpn 3000 Concentrator Series Software | 3.5\(rel\) |
| Cisco | Vpn 3005 Concentrator Software | 4.0.1 |
| Cisco | Vpn 3002 Hardware Client | All versions |
References
- http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtmlPatchVendor Advisory
- http://www.kb.cert.org/vuls/id/727780US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
- http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtmlPatchVendor Advisory
- http://www.kb.cert.org/vuls/id/727780US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11954
FAQ
What is CVE-2003-0258?
CVE-2003-0258 is a vulnerability with a CVSS score of 7.5 (HIGH). Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private n...
How severe is CVE-2003-0258?
CVE-2003-0258 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-0258?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Vpn 3015 Concentrator, Cisco Vpn 3030 Concentator, Cisco Vpn 3060 Concentrator, Cisco Vpn 3080 Concentrator, Cisco Vpn 3000 Concentrator Series Software.