CVE-2002-2139: Cisco Pix Firewall Software

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.

Affected products

• Cisco Pix Firewall Software: version 6.0 only; version 6.0(1) only; version 6.0(2) only; version 6.0(3) only; version 6.1 only; version 6.1(2) only; …

Published 2002-12-31. Last modified 2026-06-16.