Deskripsi CVE

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface.

Informasi CVE

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	5		AV:N/AC:L/Au:N/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Cisco>>Vpn_3000_concentrator_series_software >> Version 2.0

Cisco>>Vpn_3000_concentrator_series_software >> Version 2.5.2.a

Cisco>>Vpn_3000_concentrator_series_software >> Version 2.5.2.b

Cisco>>Vpn_3000_concentrator_series_software >> Version 2.5.2.c

Cisco>>Vpn_3000_concentrator_series_software >> Version 2.5.2.d

Cisco>>Vpn_3000_concentrator_series_software >> Version 2.5.2.f

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.0

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.0\(rel\)

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.0.3.a

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.0.3.b

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.0.4

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.1

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.1\(rel\)

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.1.1

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.1.2

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.1.4

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.5\(rel\)

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.5.1

Cisco>>Vpn_3000_concentrator_series_software >> Version 3.5.2

Cisco>>Vpn_3002_hardware_client >> Version *

Referensi

http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
Tags : vendor-advisory, x_refsource_CISCO

http://www.securityfocus.com/bid/5617
Tags : vdb-entry, x_refsource_BID

http://www.iss.net/security_center/static/10025.php
Tags : vdb-entry, x_refsource_XF

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.14%	–	–
2022-02-13	–	–	1.14%	–	–
2022-04-03	–	–	1.14%	–	–
2022-04-24	–	–	1.14%	–	–
2022-07-17	–	–	1.14%	–	–
2022-11-13	–	–	1.14%	–	–
2022-11-20	–	–	1.14%	–	–
2022-12-04	–	–	1.14%	–	–
2023-03-12	–	–	–	0.82%	–
2023-05-28	–	–	–	0.82%	–
2023-07-09	–	–	–	0.87%	–
2023-10-29	–	–	–	0.87%	–
2023-11-12	–	–	–	0.87%	–
2023-12-24	–	–	–	0.87%	–
2024-02-11	–	–	–	0.87%	–
2024-06-02	–	–	–	0.87%	–
2024-06-02	–	–	–	0.87%	–
2024-07-14	–	–	–	0.87%	–
2024-08-04	–	–	–	0.87%	–
2024-08-11	–	–	–	0.87%	–
2024-12-22	–	–	–	0.87%	–
2025-01-19	–	–	–	0.87%	–
2025-03-02	–	–	–	0.87%	–
2025-03-09	–	–	–	0.87%	–
2025-03-18	–	–	–	–	0.74%
2025-04-15	–	–	–	–	0.74%
2025-11-18	–	–	–	–	0.74%
2025-11-21	–	–	–	–	0.74%
2026-02-22	–	–	–	–	0.74%

Tanggal	Persentil
2022-02-06	34%
2022-02-13	35%
2022-04-03	56%
2022-04-24	57%
2022-07-17	58%
2022-11-13	59%
2022-11-20	58%
2022-12-04	59%
2023-03-12	79%
2023-05-28	8%
2023-07-09	8%
2023-10-29	81%
2023-11-12	8%
2023-12-24	81%
2024-02-11	82%
2024-06-02	82%
2024-06-02	82%
2024-07-14	83%
2024-08-04	82%
2024-08-11	83%
2024-12-22	82%
2025-01-19	82%
2025-03-02	83%
2025-03-09	83%
2025-03-18	71%
2025-04-15	72%
2025-11-18	71%
2025-11-21	72%
2026-02-22	73%

CVE-2002-1100 : Detail

CVE-2002-1100