CVE-2002-1092

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-10-04 · updated 2026-06-16

Description

Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.

Affected products

Cisco Vpn 3000 Concentrator Series Software: through 3.6\(rel\)

References

http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
http://www.securityfocus.com/bid/5613
https://exchange.xforce.ibmcloud.com/vulnerabilities/10017
http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
http://www.securityfocus.com/bid/5613
https://exchange.xforce.ibmcloud.com/vulnerabilities/10017

Get alerted when CVE-2002-1092 or the next vulnerability affects your stack