Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:4.1.7.l:*:*:*:*:*:*:*

part: o version: 4.1.7.l update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductVpn 3000 Concentrator Series Software (d9f9b25f-4580-5679-a62e-08a9b3ab4113)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4313 vulnerable 2026-06-08 04:49:17.537994 Details available
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.
Published: 2006-08-23T22:00:00.000Z
Updated: 2024-08-07T19:06:07.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3906 vulnerable 2026-06-08 04:49:10.445802 Details available
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.
Published: 2006-07-27T22:00:00.000Z
Updated: 2024-08-07T18:48:39.430Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.