Remote Denial of Service Vulnerability in Cisco VPN 3000 Series Concentrator

CVE-2005-0943

Summary

A vulnerability exists in the Cisco VPN 3000 Series Concentrator, specifically in firmware versions 4.1.7.A and earlier, that allows remote attackers to effectively disrupt service. By sending a crafted HTTPS packet, an attacker can trigger a denial of service, resulting in either a device reload or the dropping of user connections. This flaw poses significant risks to network stability and user accessibility, making it critical for organizations relying on this equipment to take immediate action to secure their environments.

References