What’s Vulnerable › Vulnerabilities

CVE-2005-0943

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-03-30 · updated 2026-06-16

Description

Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.

Affected products

• Cisco Vpn 3000 Concentrator Series Software: 2.0, 2.5.2.a, 2.5.2.b, 2.5.2.c, 2.5.2.d, 2.5.2.f (+32)
• Cisco Vpn 3002 Hardware Client: all versions
• Cisco Vpn 3005 Concentrator Software: 4.0.1
• Cisco Vpn 3015 Concentrator: all versions
• Cisco Vpn 3020 Concentrator: all versions
• Cisco Vpn 3030 Concentator: all versions
• Cisco Vpn 3060 Concentrator: all versions
• Cisco Vpn 3080 Concentrator: all versions

References

• http://secunia.com/advisories/14784
• http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml
• http://www.securityfocus.com/bid/12948
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19903
• http://secunia.com/advisories/14784
• http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml
• http://www.securityfocus.com/bid/12948
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19903

Get alerted when CVE-2005-0943 or the next vulnerability affects your stack