Vulnerability in Symantec Firewall Vpn Appliance 100
CVE-2004-1474
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.032 (87.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 88th percentile — 87.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.032 · newest: 0.032 · change: 0.000
Affected products
- Symantec Firewall Vpn Appliance 100
- Symantec Firewall Vpn Appliance 200
- Symantec Firewall Vpn Appliance 200r
- Symantec Gateway Security 320
- Symantec Gateway Security 360
- Symantec Gateway Security 360r
- Symantec Nexland Isb Soho Firewall Appliance
- Symantec Nexland Pro100 Firewall Appliance
- Symantec Nexland Pro400 Firewall Appliance
- Symantec Nexland Pro800 Firewall Appliance
References
- secunia.com/advisories/12635 (third-party-advisory)
- securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html (Patch, Vendor Advisory)
- www.kb.cert.org/vuls/id/173910 (US Government Resource, Patch, Third Party Advisory, third-party-advisory)
- marc.info/ (mailing-list)
- www.osvdb.org/10206 (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/17471 (vdb-entry)
- www.securityfocus.com/bid/11237 (Patch, vdb-entry)