CVE-2002-1105: Cisco VPN Client

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password.

Affected products

• Cisco VPN Client: version 2.0 only; version 3.0 only; version 3.1 only; version 3.5.1 only

Published 2002-10-04. Last modified 2026-06-16.