CVE-1999-1100 json
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective…
published 1999-12-31 26 y ago modified 2026-06-16 4 mo ago also EUVD-1999-1081
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.4%
- EPSS 1.4% chance of exploitation in 30 days, percentile 71%
- public exploits
- 0
- none known
Summary
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
Patch / fix
Exploit prediction
1.35% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
cisco.com
/warp/public/770/pixkey-pub.shtml
vendor-advisory, patch
-
ciac.llnl.gov
/ciac/bulletins/i-056.shtml
third-party-advisory, government-resource
-
exchange.xforce.ibmcloud.com
/vulnerabilities/1579
vdb-entry
Sources
- CVE List CVE-1999-1100
- NVD CVE-1999-1100
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.