{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:15:01Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20030507-vpn3k","slug":"cisco-sa-20030507-vpn3k","vendor":"Cisco","title":"Cisco VPN 3000 Concentrator Vulnerabilities","summary":"This advisory documents vulnerabilities for the Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client. These vulnerabilities are documented as Cisco bug ID CSCea77143 (IPSec over TCP), CSCdz15393 (SSH), and CSCdt84906 (ICMP). There are workarounds available to mitigate the effects of these vulnerabilities. Upgrading to the latest version of code for the Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client, version 4.0.1 and 3.6.7F, would protect against all of these documented vulnerabilities. This advisory will be posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k.","severity":"NA","published_at":"2003-05-07T23:00:00Z","updated_at":"2003-05-07T23:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k/csaf/cisco-sa-20030507-vpn3k.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":3,"visible_product_count":2,"public_evidence_count":6,"kev_count":0,"highest_epss":0.02158},"cves":[{"id":"CVE-2003-0258","kev":false,"epss":{"score":0.02158,"percentile":0.8019,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2003-0260","kev":false,"epss":{"score":0.02131,"percentile":0.79947,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2003-0259","kev":false,"epss":{"score":0.02131,"percentile":0.79948,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2003-0258"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:16Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02158,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2003-05-07T23:00:00Z","updated_at":"2003-05-07T23:00:00Z","advisory_updated_at":"2003-05-07T23:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k","row_display_order":1},{"product":{"name":"Cisco VPN 3002 Hardware Client","slug":"cisco-vpn-3002-hardware-client","vendor":"Cisco"},"cve":{"id":"CVE-2003-0258"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:16Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3002 Hardware Client","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02158,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2003-05-07T23:00:00Z","updated_at":"2003-05-07T23:00:00Z","advisory_updated_at":"2003-05-07T23:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k","row_display_order":2},{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2003-0260"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:16Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02131,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2003-05-07T23:00:00Z","updated_at":"2003-05-07T23:00:00Z","advisory_updated_at":"2003-05-07T23:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k","row_display_order":3},{"product":{"name":"Cisco VPN 3002 Hardware Client","slug":"cisco-vpn-3002-hardware-client","vendor":"Cisco"},"cve":{"id":"CVE-2003-0260"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:16Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3002 Hardware Client","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02131,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2003-05-07T23:00:00Z","updated_at":"2003-05-07T23:00:00Z","advisory_updated_at":"2003-05-07T23:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k","row_display_order":4},{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2003-0259"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:16Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02131,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2003-05-07T23:00:00Z","updated_at":"2003-05-07T23:00:00Z","advisory_updated_at":"2003-05-07T23:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k","row_display_order":5},{"product":{"name":"Cisco VPN 3002 Hardware Client","slug":"cisco-vpn-3002-hardware-client","vendor":"Cisco"},"cve":{"id":"CVE-2003-0259"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:16Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3002 Hardware Client","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02131,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2003-05-07T23:00:00Z","updated_at":"2003-05-07T23:00:00Z","advisory_updated_at":"2003-05-07T23:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20030507-vpn3k","row_display_order":6}]}