CVE-2002-0853: Cisco VPN Client

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload.

Affected products

• Cisco VPN Client: version 3.5.1 only; version 3.5.2 only

Published 2002-09-05. Last modified 2026-06-16.