CVE-2002-1092

VendorciscoProductvpn 3000 concentrator series softwareDiscoveredOct 4, 2002UpdatedApr 16, 2026

Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.

View graph Watch Export

CVSS v3.1

—

EPSS

1.40%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

1 relationships

vpn 3000 concentrator series software

source

Timeline

disclosure → media coverage

Oct 4, 2002

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026