# CVE-2002-1094

## Summary

- **CVE ID:** CVE-2002-1094
- **Severity:** UNKNOWN
- **CVSS Score:** 0.05
- **CWE:** N/A
- **Published:** Sep 10, 2002
- **Last Modified:** Mar 16, 2026

## Description

Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml)
- [CNA](http://www.iss.net/security_center/static/10020.php)
- [CNA](http://www.securityfocus.com/bid/5624)
- [CNA](http://www.securityfocus.com/bid/5621)
- [CNA](http://www.securityfocus.com/bid/5623)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 1.23%
- **EPSS Percentile:** 78.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._