Cisco VPN 3005 Concentrator vulnerabilities

2 CVEs affecting Cisco VPN 3005 Concentrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-4354, published 2010-11-30.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0427, published 2001-06-18. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which…
• CVE-2010-4354, published 2010-11-30. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices…