CVE-2006-4313: cisco vpn_3000_concentrator_series_software
Vulnerability summary
CVE-2006-4313 is a medium (CVSS 5.0) vulnerability in cisco vpn_3000_concentrator_series_software. EPSS estimates a 12.03% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 23-08-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete directories via unknown vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.03%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.03% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCisco VPN Concentrator 3000 FTP Unauthorized Administrative Access
auxiliary/admin/networking/cisco_vpn_3000_ftp_bypass
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco1 product
- vpn_3000_concentrator_series_software4.0 | 4.0.1 | 4.0.5.b | 4.1.5.b | 4.1.7.a | 4.1.7.b | 4.1.7.l | 4.7 | 4.7.1 | 4.7.1.f | 4.7.2.f
1 vendor · 1 product