CVE-2006-4313
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 11.82% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- cisco/vpn 3000 concentrator series software
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21617
- http://securitytracker.com/id?1016737
- http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtmlPatch
- http://www.osvdb.org/28138
- http://www.osvdb.org/28139
- http://www.securityfocus.com/bid/19680
- http://www.vupen.com/english/advisories/2006/3368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28539
- http://secunia.com/advisories/21617
- http://securitytracker.com/id?1016737
- http://www.cisco.com/warp/public/707/cisco-sa-20060823-vpn3k.shtmlPatch
- http://www.osvdb.org/28138
- http://www.osvdb.org/28139
- http://www.securityfocus.com/bid/19680
- http://www.vupen.com/english/advisories/2006/3368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28539
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.