CVE-1999-1100

high Cisco
CVSS v3 Base Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score
0.5%
Exploitation probability in 30 days
Top 33% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Published: December 31, 1999 (9631 days ago)
Last Modified: April 16, 2026
Vendor: Cisco
Source: NVD

Description

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.

CWE

NVD-CWE-Other

Affected Products

cisco pix private link

References

🔗 ciac.llnl.gov 🔗 www.cisco.com 🔗 exchange.xforce.ibmcloud.com 🔗 ciac.llnl.gov 🔗 www.cisco.com