What’s Vulnerable › Vulnerabilities

CVE-2005-2025

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-06-20 · updated 2026-06-16

Description

Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.

Affected products

• Cisco Vpn 3000 Concentrator: all versions
• Cisco Vpn 3000 Concentrator Series Software: 2.0, 2.5.2.a, 2.5.2.b, 2.5.2.c, 2.5.2.d, 2.5.2.f (+31)
• Cisco Vpn 3005 Concentrator Software: 4.0.1
• Cisco Vpn 3015 Concentrator: all versions
• Cisco Vpn 3020 Concentrator: all versions
• Cisco Vpn 3030 Concentator: all versions
• Cisco Vpn 3060 Concentrator: all versions
• Cisco Vpn 3080 Concentrator: all versions

References

• http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm
• http://www.securityfocus.com/bid/13992
• http://www.vupen.com/english/advisories/2005/0822
• http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm
• http://www.securityfocus.com/bid/13992
• http://www.vupen.com/english/advisories/2005/0822

Get alerted when CVE-2005-2025 or the next vulnerability affects your stack