CVE-2001-0427: Cisco VPN 3000 Concentrator

High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days.

Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.

Affected products

• Cisco VPN 3000 Concentrator: any version
• Cisco VPN 3005 Concentrator: any version
• Cisco VPN 3015 Concentrator: any version
• Cisco VPN 3030 Concentator: any version
• Cisco VPN 3060 Concentrator: any version
• Cisco VPN 3080 Concentrator: any version

Published 2001-06-18. Last modified 2026-06-16.