← Vulnerability feed

Vulnerability record · CVE-2002-2225 · published 31 December 2002

CVE-2002-2225: Safenet softremote vpn client vulnerability

Safenet · Softremote Vpn Client

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.

5.1 CVSS 2.0 Medium EPSS 3.0% · top 13.1%
5.1CVSS 2.0 base score
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.kb.cert.org/vuls/id/287771 PatchUS Government Resource
http://www.kb.cert.org/vuls/id/AAMN-59VTUQ
http://www.safenet-inc.com/knowledgebase/read_item.asp?ID=375
http://www.kb.cert.org/vuls/id/287771 PatchUS Government Resource
http://www.kb.cert.org/vuls/id/AAMN-59VTUQ
http://www.safenet-inc.com/knowledgebase/read_item.asp?ID=375

Track CVE-2002-2225 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.2CVE-2008-0573Safenet ipsecdrv.sys permissions and access controls vulnerabilityIPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafted IPSECDRV_IOCTL IOCTL reques…EPSS 0.84%5.0CVE-2007-3157Safenet highassurance remote vulnerabilityIPSecDrv.sys 10.4.0.12 in SafeNET High Assurance Remote 1.4.0 Build 12, and SoftRemote, allows remote attackers to cause a denial of service (infinit…EPSS 8.8%2.1CVE-2005-0346Safenet softremote vpn client vulnerabilitySafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process, which allows local users to …EPSS 0.44%

Source: NIST National Vulnerability Database (record CVE-2002-2225), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.