Unrated severityNVD Advisory· Published Aug 12, 2002· Updated Jun 16, 2026
CVE-2002-0848
CVE-2002-0848
Description
Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:o:cisco:vpn_5000_concentrator_series_software:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:vpn_5000_concentrator_series_software:*:*:*:*:*:*:*:*range: >=5.2.14,<=5.2.23.0003
- (no CPE)range: <=6.0.21.0002, <=5.2.23.0003
Patches
Vulnerability mechanics
References
3- www.cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/5417nvdThird Party AdvisoryVDB Entry
- www.iss.net/security_center/static/9781.phpnvdBroken Link
News mentions
0No linked articles in our index yet.