First published: Wed Mar 30 2005(Updated: )
Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco VPN 3015 Concentrator | ||
Cisco VPN 3020 Concentrator | ||
Cisco VPN 3030 Concentrator | ||
Cisco VPN 3060 Concentrator | ||
Cisco VPN 3080 Concentrator | ||
Cisco VPN 3000 concentrator series software | =2.0 | |
Cisco VPN 3000 concentrator series software | =2.5.2.a | |
Cisco VPN 3000 concentrator series software | =2.5.2.b | |
Cisco VPN 3000 concentrator series software | =2.5.2.c | |
Cisco VPN 3000 concentrator series software | =2.5.2.d | |
Cisco VPN 3000 concentrator series software | =2.5.2.f | |
Cisco VPN 3000 concentrator series software | =3.0 | |
Cisco VPN 3000 concentrator series software | =3.0.3.a | |
Cisco VPN 3000 concentrator series software | =3.0.3.b | |
Cisco VPN 3000 concentrator series software | =3.0.4 | |
Cisco VPN 3000 concentrator series software | =3.1 | |
Cisco VPN 3000 concentrator series software | =3.1\(rel\) | |
Cisco VPN 3000 concentrator series software | =3.1.1 | |
Cisco VPN 3000 concentrator series software | =3.1.2 | |
Cisco VPN 3000 concentrator series software | =3.1.4 | |
Cisco VPN 3000 concentrator series software | =3.5\(rel\) | |
Cisco VPN 3000 concentrator series software | =3.5.1 | |
Cisco VPN 3000 concentrator series software | =3.5.2 | |
Cisco VPN 3000 concentrator series software | =3.5.3 | |
Cisco VPN 3000 concentrator series software | =3.5.4 | |
Cisco VPN 3000 concentrator series software | =3.5.5 | |
Cisco VPN 3000 concentrator series software | =3.6 | |
Cisco VPN 3000 concentrator series software | =3.6.1 | |
Cisco VPN 3000 concentrator series software | =3.6.3 | |
Cisco VPN 3000 concentrator series software | =3.6.5 | |
Cisco VPN 3000 concentrator series software | =3.6.7 | |
Cisco VPN 3000 concentrator series software | =3.6.7.a | |
Cisco VPN 3000 concentrator series software | =3.6.7.b | |
Cisco VPN 3000 concentrator series software | =3.6.7.c | |
Cisco VPN 3000 concentrator series software | =3.6.7.d | |
Cisco VPN 3000 concentrator series software | =3.6.7.f | |
Cisco VPN 3000 concentrator series software | =3.6.7d | |
Cisco VPN 3000 concentrator series software | =4.0 | |
Cisco VPN 3000 concentrator series software | =4.0.1 | |
Cisco VPN 3000 concentrator series software | =4.0.5.b | |
Cisco VPN 3000 concentrator series software | =4.1 | |
Cisco VPN 3000 concentrator series software | =4.1.5.b | |
Cisco VPN 3000 concentrator series software | =4.1.7.a | |
Cisco VPN 3005 Concentrator | =4.0.1 | |
Cisco VPN 3002 Hardware Client |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0943 is classified as a high severity vulnerability due to its potential to cause a denial of service by remotely dropping user connections or reloading the device.
To fix CVE-2005-0943, it's recommended to upgrade the Cisco VPN 3000 series concentrator firmware to version 4.1.7.B or later.
CVE-2005-0943 affects the Cisco VPN 3000 series concentrators, including models 3015, 3020, 3030, 3060, and 3080 running firmware 4.1.7.A or earlier.
With CVE-2005-0943, attackers can send crafted HTTPS packets that can cause the device to reload or drop user connections.
There are no effective workarounds for CVE-2005-0943; the only recommended action is to apply the appropriate firmware updates.