Cisco IPSec VPN Groupname Enumeration Weakness

  Bookmark
 and Share

Cisco VPN 3000 concentrator products provide Virtual Private Network services to remote users. Cisco IPSec VPN is exposed to a remote groupname enumeration weakness. Specifically, the device will reply when it receives an Internet Key Exchange message with a valid group name.

Ref: http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html

10.50.25 - CVE: Not Available
Platform: Cross Platform