CVE-2002-2139

MEDIUM · CVSS 6.4 EPSS 1.24%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-12-31 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.4. It affects Cisco.

CVE

CVE-2002-2139

Severity

MEDIUM

CVSS

6.4

EPSS

1.24%

Cisco

Original NVD Description

Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack.