VULNERABILITY INTELLIGENCE

CVE-2002-1108

CVSS score5 MEDIUM

EPSS probability1.18%

CISA KEVNot currently listed

Published2002-10-04

Last modified2026-06-16

Description

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel.