Description
HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request.
Affected products
- Cisco / vpn_3000_concentrator_series_software2.0 – 2.0
- Cisco / vpn_3000_concentrator_series_software2.5.2.a – 2.5.2.a
- Cisco / vpn_3000_concentrator_series_software2.5.2.b – 2.5.2.b
- Cisco / vpn_3000_concentrator_series_software2.5.2.c – 2.5.2.c
- Cisco / vpn_3000_concentrator_series_software2.5.2.d – 2.5.2.d
- Cisco / vpn_3000_concentrator_series_software2.5.2.f – 2.5.2.f
- Cisco / vpn_3000_concentrator_series_software3.0 – 3.0
- Cisco / vpn_3000_concentrator_series_software3.0(rel) – 3.0(rel)
- Cisco / vpn_3000_concentrator_series_software3.0.3.a – 3.0.3.a