CVE-2005-2025
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.
Key facts
- CVSS score
- 5.0 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N- EPSS score
- 2.3% (83th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2005-2027)
- Published
- June 20, 2005
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2005-2027 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / vpn 3000 concentrator
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3000 concentrator series software
- cisco / vpn 3005 concentrator software
- cisco / vpn 3015 concentrator
- cisco / vpn 3020 concentrator
- cisco / vpn 3030 concentator
- cisco / vpn 3060 concentrator
- cisco / vpn 3080 concentrator
Certified products that may be affected
2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Cisco VPN 3000 Series Concentrators - 3005, 3015, 3030, 3060 and 3080 - Cisco Systems, Inc. - FIPS 140 421 - historical
- VPN 3000 Concentrator Series - Cisco Systems, Inc. - FIPS 140 210 - historical
References
- http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm(Exploit, Patch, Vendor Advisory)
- http://www.securityfocus.com/bid/13992(Patch, Vendor Advisory)
- http://www.vupen.com/english/advisories/2005/0822
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain