CVE-2002-1107

CVE-2002-1107 describes a weakness in Cisco Virtual Private Network (VPN) Client software versions 2.x.x and 3.x prior to 3.5.2B, where the random number generation is insufficient. This flaw could enable various attacks, including spoofing. With a CVSS score of 7.5, it is considered highly severe, allowing an unauthenticated attacker to exploit it over the network with low complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, no public exploit code, and it is not on the KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness among security professionals.