Cisco VPN 5000 Client vulnerabilities

2 CVEs affecting Cisco VPN 5000 Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1492, published 2003-04-02.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-1492, published 2003-04-02. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.
• CVE-2002-1491, published 2003-04-02. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.