GCVE - cpe:2.3:a:cisco:pix_firewall:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:pix_firewall:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Pix Firewall (`23cd8c06-4199-5985-b70f-c0eac1541d98`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2002-0954`	vulnerable	2026-06-08 04:46:22.556403	Details available The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques. Published: 2002-08-31T04:00:00.000Z Updated: 2024-08-08T03:12:15.523Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0121.html http://marc.info/?l=bugtraq&m=102651159507659&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-0613`	vulnerable	2026-06-08 04:45:18.437871	Details available Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections. Published: 2000-10-13T04:00:00.000Z Updated: 2024-08-08T05:21:31.253Z Open on db.gcve.eu Reference links http://www.osvdb.org/1457 http://www.cisco.com/warp/public/707/pixtcpreset-pub.shtml http://www.securityfocus.com/templates/archive.pike?list=1&msg=B3D6883199DBD311868100A0C9FC2CDC046B72%40protea.citec.net http://www.securityfocus.com/bid/1454 https://exchange.xforce.ibmcloud.com/vulnerabilities/4928	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1582`	vulnerable	2026-06-08 04:44:58.349895	Details available By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality. Published: 2005-04-21T04:00:00.000Z Updated: 2024-08-01T17:18:07.659Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/8052 http://www.cisco.com/warp/public/707/pixest-pub.shtml http://www.kb.cert.org/vuls/id/6733	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.