CVE-2002-1102

CVE-2002-1102 describes a denial-of-service vulnerability in Cisco VPN 3000 Concentrators running software versions 2.2.x and 3.x prior to 3.5.4, as well as the VPN 3002 Hardware Client. This flaw allows a remote attacker to disrupt existing LAN-to-LAN IPsec connections by initiating a new connection that reuses a security association already in use by another remote device. The vulnerability has a CVSS v2 score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, leading to a partial denial of service. There is no evidence of active exploitation, nor are there any known public exploit codes or Metasploit modules. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.