CVE-2005-1057: Cisco IOS

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet."

Affected products

• Cisco IOS: version 12.2t only; version 12.3 only; version 12.3t only

Published 2005-05-02. Last modified 2026-06-16.