CVE-1999-1100

HIGH 7.5CVE-1999-1100 · Published 31/12/1999 · updated 16/06/2026

In short

CVE-1999-1100 is a HIGH (CVSS 7.5) vulnerability affecting pix private link (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pix private link cisco	`≤ 4.1\(6\)`	No fix yet

Description

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.

References

ciac.llnl.gov/ciac/bulletins/i-056.shtml
cisco.com/warp/public/770/pixkey-pub.shtml · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/1579

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free