← CVECheck
HomeVulnerabilities

CVE-2002-1107 — HIGH severity vulnerability (Cisco Virtual Private Network (VPN) Client software 2.x.x, a)

Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.

CVE IDCVE-2002-1107
SeverityHIGH
CVSS score7.5
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
CWENVD-CWE-Other
StatusModified
Published2002-10-04
Last modified2026-04-16
DescriptionCisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.
SourceNIST National Vulnerability Database

🔍 Search all vulnerabilities →