Unscored severity · published Aug 12, 2002
CVE-2002-0528
Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Soho Firewall · Watchguard
5.0.35 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0528
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0528
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0009.html
Vendor Advisory
http://online.securityfocus.com/archive/1/266948
Patch
http://www.iss.net/security_center/static/8814.php
Exploit
http://www.securityfocus.com/bid/4491
More from Soho Firewall
–
CVE-2002-1046
Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet…
–
CVE-2002-1047
The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name
–
CVE-2002-0527
Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOHO forwards a packet with bad IP options
–
CVE-2001-0049
WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests
–
CVE-2000-0894
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a…