AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2002-1106

HIGH · CVSS 7.5 EPSS 0.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-10-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2002-1106
Severity
HIGH
CVSS
7.5
EPSS
0.95%
Cisco

Original NVD Description

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.