Vpn Client
Vendor:
First CVE: May 28, 2002 · Active for 24 years
19
Total CVEs
More Total CVEs than 93% of tracked products
2.1
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
5.8
Avg CVSS
Higher Avg CVSS than 18% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Vpn Client over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 28, 2002
24 years ago
Most Recent CVE
Oct 6, 2015
3,944 days ago
CVE Severity & Scoring
Vpn Client19 CVEs
11%
58%
32%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown19 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown19 (100.0%)
User Interaction
None0 (0.0%)
Unknown19 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown19 (100.0%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-5121HIGH dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and | Nov 18, 2008 | 7.2 | 27 | NO | YES |
CVE-2002-1447HIGH Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument. | May 28, 2002 | 7.2 | 27 | NO | YES |
CVE-2002-1106HIGH Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Co | Oct 4, 2002 | 7.5 | 24 | NO | NO |
CVE-2002-1107HIGH Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks suc | Oct 4, 2002 | 7.5 | 24 | NO | NO |
CVE-2015-7600HIGH Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command f | Oct 6, 2015 | 7.2 | 23 | NO | NO |
CVE-2008-0324MEDIUM Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80002038 IOCTL with a small size value, wh | Jan 17, 2008 | 4.9 | 22 | NO | YES |
CVE-2012-3052MEDIUM Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747. | Sep 16, 2012 | 6.9 | 21 | NO | NO |
CVE-2011-2678MEDIUM The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privil | Jul 7, 2011 | 6.8 | 20 | NO | NO |
CVE-2007-4414MEDIUM Cisco VPN Client on Windows before 4.8.02.0010 allows local users to gain privileges by enabling the "Start Before Logon" (SBL) and Microsoft Dial-Up Networking options, and then i | Aug 18, 2007 | 6.8 | 20 | NO | NO |
CVE-2012-5429MEDIUM The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel, which allows local users to cause a denial of service (kernel fault and system crash) via | Jan 17, 2013 | 4.6 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
21.1% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Vpn Client
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.0.7.0440 | 1 | 7.2 | 0.5% | 0 | 0 |
| 5.0.7.0290 | 2 | 7.0 | 0.4% | 0 | 0 |
| 5.0.7.0240 | 2 | 7.0 | 0.4% | 0 | 0 |
| 5.0.7 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.6 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.5 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.2.0090 | 4 | 5.3 | 1.2% | 0 | 2 |
| 5.0.2 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.07.0440 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.07.0410 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.07.0290 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.06.0160 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.05.0290 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.04.0300 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.03.0560 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.03.0530 | 2 | 7.0 | 0.5% | 0 | 0 |
| 5.0.02.0090 | 3 | 5.4 | 1.1% | 0 | 1 |
| 5.0.01.0600 | 4 | 5.8 | 0.9% | 0 | 1 |
| 5.0.01 | 3 | 5.4 | 1.1% | 0 | 1 |
| 5.0.00.340 | 1 | 2.1 | 2.5% | 0 | 1 |