CVE-2003-1004: Cisco Pix Firewall

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request to the outside interface of the firewall.

Affected products

• Cisco Pix Firewall: version 6.2.2_.111 only
• Cisco Pix Firewall Software: version 6.2 only; version 6.2(1) only; version 6.2(2) only; version 6.2(3) only; version 6.2(3.100) only

Published 2004-01-05. Last modified 2026-06-16.