CVSS: 5.0EPSS: 0%CPEs: 21EXPL: 0CVE-2002-1102
https://notcve.org/view.php?id=CVE-2002-1102
The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to remove the previous connection. • http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml http://www.securityfocus.com/bid/5622 https://exchange.xforce.ibmcloud.com/vulnerabilities/10027 •
CVSS: 7.5EPSS: 0%CPEs: 17EXPL: 0CVE-2002-1097
https://notcve.org/view.php?id=CVE-2002-1097
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages. • http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml http://www.iss.net/security_center/static/10022.php http://www.securityfocus.com/bid/5612 •
CVSS: 5.0EPSS: 0%CPEs: 7EXPL: 0CVE-2002-1095
https://notcve.org/view.php?id=CVE-2002-1095
Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set. • http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml http://www.iss.net/security_center/static/10021.php http://www.securityfocus.com/bid/5625 •
CVSS: 5.0EPSS: 0%CPEs: 9EXPL: 0CVE-2002-1108
https://notcve.org/view.php?id=CVE-2002-1108
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel. • http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml http://www.securityfocus.com/bid/5651 https://exchange.xforce.ibmcloud.com/vulnerabilities/10047 •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2002-1107
https://notcve.org/view.php?id=CVE-2002-1107
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing. • http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml http://www.securityfocus.com/bid/5653 https://exchange.xforce.ibmcloud.com/vulnerabilities/10046 •