CVE-2002-1099: Cisco VPN 3000 Concentrator Series Software

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.

Affected products

• Cisco VPN 3000 Concentrator Series Software: version 2.0 only; version 2.5.2.a only; version 2.5.2.b only; version 2.5.2.c only; version 2.5.2.d only; version 2.5.2.f only; …
• Cisco VPN 3002 Hardware Client: any version

Published 2002-10-04. Last modified 2026-06-16.