CVE-2006-4313

CVE-2006-4313 describes multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators, specifically versions before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F. These flaws allow unauthenticated attackers to modify files or create and delete directories by exploiting various FTP commands like CWD, MKD, and RMD. With a CVSS score of 5.0, this vulnerability has a network attack vector, low complexity, and a partial impact on integrity, indicating unauthorized modification capabilities. While not listed on the KEV catalog, a Metasploit module exists for unauthorized administrative access, and its high EPSS and FAUCET Risk Scores suggest a significant potential for exploitation despite no recorded active exploitation, public discussion, or media coverage.