CVE-2002-2140: Cisco Pix Firewall Software

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS.

Affected products

• Cisco Pix Firewall Software: version 5.2 only; version 5.2(1) only; version 5.2(2) only; version 5.2(3) only; version 5.2(4) only; version 5.2(5) only; …

Published 2002-12-31. Last modified 2026-06-16.