Unscored severity · published Dec 31, 2002
CVE-2002-2139
Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pix Firewall Software · Cisco
6.0; 6.0(1); 6.0(2); 6.0(3); 6.1; 6.1(2); +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2139
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2139
Patch
http://www.ciac.org/ciac/bulletins/n-017.shtml
www.cisco.com
http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml
www.iss.net
http://www.iss.net/security_center/static/10660.php
Patch
http://www.securityfocus.com/bid/6211
More from Pix Firewall Software
8.8
CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
–
CVE-2013-0149
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488…
–
CVE-2008-0028
Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL)…
–
CVE-2007-0962
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http"…
–
CVE-2007-0959
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device…