[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAxOXumbzUfznBbqsTY42yGB6XsgpouRIYnvWMtDcjH8":3,"g5a-ex:cisco\u002Fvpn_3020_concentrator@*":93,"g5a-family:cisco\u002Fvpn_3020_concentrator":95},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":41,"kevVulnerabilities":70,"seoMetadata":71,"meta":90},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"cisco","vpn_3020_concentrator",8,5,0,"2010-11-30",[14,17,19,21,23,25,27,29],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.7.l",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"4.7",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"4.7.1",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"4.7.1.f",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"4.7.2",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"4.7.2.a",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"4.7.2.f",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"4.7\\(rel\\)","Vpn 3020 Concentrator by Cisco is a technology product with 8 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39,40],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},[42,49,56,61,66],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":10,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":48},"CVE-2006-3906","Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.","2006-07-27","v2","Medium",0.06874,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":16,"epssScore":55},"CVE-2005-4499","The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.","2005-12-22",7.5,"High",0.02593,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":10,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":60},"CVE-2005-2025","Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.","2005-06-20",0.02342,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":10,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":65},"CVE-2005-0943","Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.","2005-03-30",0.01623,{"cveId":67,"description":68,"publishedDate":12,"cvssScore":10,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":69},"CVE-2010-4354","The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.",0.01588,[],{"title":72,"metaDescription":73,"keywords":74,"structuredData":75},"Vpn 3020 Concentrator by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Vpn 3020 Concentrator by Cisco covering 8 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Vpn 3020 Concentrator vulnerabilities, Vpn 3020 Concentrator security, Vpn 3020 Concentrator CVE, Cisco Vpn 3020 Concentrator, Vpn 3020 Concentrator threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":76,"@type":77,"name":78,"description":73,"url":79,"manufacturer":80,"applicationCategory":84,"softwareVersion":85,"mainEntity":86},"https:\u002F\u002Fschema.org","SoftwareApplication","Vpn 3020 Concentrator","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fvpn_3020_concentrator",{"@type":81,"name":82,"url":83},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","8 versions tracked",{"@type":87,"name":88,"description":89,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Vpn 3020 Concentrator Security Vulnerabilities","Security vulnerabilities affecting Vpn 3020 Concentrator by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":91,"apiVersion":92},"2026-10-18T20:49:55.547Z","3.0",{"rows":94,"total":11,"capped":16,"failed":11},[],[]]