Regarding Vulnerabilities on Cisco VPN 3000 Concentrator

[ajay chauhan]

Hi,

I would like to know the fix of these Vulnerability.

1) PPTP VPN Configuration Allows Weak MS-CHAPv1 Authentication

2)SSH Protocol Version 1 Supported

3)Readable SNMP Information

4)Management Interfaces Accessible On Cisco Device Vulnerability

5)X.509 Certificate MD5 Signature Collision Vulnerability

Thanks

Ajay

[Jennifer Halim]

Please find the following list of Security Advisories for VPN3000 for your reference:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/prod_security_advisories_list.html

Please also kindly be advised that VPN3000 is EOL and there will be no further support if there is any bugs/vulnerability on this product. Here is the EOL for your reference:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5743/ps5749/ps2284/prod_end-of-life_notice0900aecd805cd5a0.html

Hope this helps.