What’s Vulnerable › Vulnerabilities

CVE-2006-3551

• Severity: low (CVSS 1.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-07-13 · updated 2026-06-16

Description

NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and destination port 68, and outbound UDP traffic with source port 68 and destination port 67.

Affected products

• Ncp Network Communications Secure Client: through 8.30_build_59

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27484
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047547.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27484

Get alerted when CVE-2006-3551 or the next vulnerability affects your stack