Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco VPN 5000系列集中器RADIUS PAP认证漏洞
Vulnerability Description
Cisco VPN 5000系列集中器由通用的远程访问虚拟专网(VPN)平台和将高可用性、高性能和可扩展性与当今最先进的加密和认证技术结合在一起的客户机软件组成，它可以为专业运营商或企业用户提供服务。 Cisco VPN 5000系列集中器在使用RADIUS方式进行PAP认证时存在一个安全漏洞，用户口令可能会以明文方式发送。攻击者可以在与Cisco VPN 5000集中器和RADIUS服务器相连的网络上进行窃听，获取用户口令。 VPN 5000系列集中器支持三种RADIUS通信方式。[RADIUS]部分中
CVSS Information
N/A
Vulnerability Type
N/A