Denial of Service Vulnerability in Cisco VPN 3000 Concentrator
CVE-2002-1095
Currently unrated
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 4 October 2002
What is CVE-2002-1095?
The Cisco VPN 3000 Concentrator, when encryption is enabled, is susceptible to a denial of service attack. This issue arises when a remote attacker utilizes a Windows-based PPTP client configured with the 'No Encryption' setting, leading to a potential service disruption as the device may undergo an unexpected reload. This vulnerability underscores the importance of proper encryption settings in VPN configurations to safeguard against unauthorized service interruptions.