{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:03:17Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20040831-krb5","slug":"cisco-sa-20040831-krb5","vendor":"Cisco","title":"Vulnerabilities in Kerberos 5 Implementation","summary":"Two vulnerabilities in the Massachusetts Institute of Technology (MIT) Kerberos 5 implementation that affect Cisco VPN 3000 Series Concentrators have been announced by the MIT Kerberos Team. Cisco VPN 3000 Series Concentrators authenticating users against a Kerberos Key Distribution Center (KDC) may be vulnerable to remote code execution and to Denial of Service (DoS) attacks. Cisco has made free software available to address these problems. Cisco VPN 3000 Series Concentrators not authenticating users against a Kerberos Key Distribution Center (KDC) are not impacted. No exploitations of these vulnerabilities have been reported. This advisory is available at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040831-krb5.","severity":"NA","published_at":"2004-08-31T18:30:00Z","updated_at":"2004-08-31T18:30:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040831-krb5","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20040831-krb5/csaf/cisco-sa-20040831-krb5.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":4,"visible_product_count":1,"public_evidence_count":4,"kev_count":0,"highest_epss":0.08257},"cves":[{"id":"CVE-2004-0642","kev":false,"epss":{"score":0.08257,"percentile":0.94288,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2004-0772","kev":false,"epss":{"score":0.06994,"percentile":0.93446,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2004-0644","kev":false,"epss":{"score":0.05585,"percentile":0.92027,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2004-0643","kev":false,"epss":{"score":0.01425,"percentile":0.69984,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2004-0642"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.08257,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-31T18:30:00Z","updated_at":"2004-08-31T18:30:00Z","advisory_updated_at":"2004-08-31T18:30:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040831-krb5","row_display_order":1},{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2004-0772"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.06994,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-31T18:30:00Z","updated_at":"2004-08-31T18:30:00Z","advisory_updated_at":"2004-08-31T18:30:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040831-krb5","row_display_order":2},{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2004-0644"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.05585,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-31T18:30:00Z","updated_at":"2004-08-31T18:30:00Z","advisory_updated_at":"2004-08-31T18:30:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040831-krb5","row_display_order":3},{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2004-0643"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:20:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01425,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2004-08-31T18:30:00Z","updated_at":"2004-08-31T18:30:00Z","advisory_updated_at":"2004-08-31T18:30:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040831-krb5","row_display_order":4}]}