Unscored severity · published Oct 4, 2002
CVE-2002-1046
Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firebox · Watchguard
5.0 · source: NVD
SF
Soho Firewall · Watchguard
5.0.28; 5.0.29; 5.0.31; 5.0.35; 5.0.35a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1046
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1046
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0012.html
Patch
http://www.iss.net/security_center/static/9509.php
Exploit
http://www.securityfocus.com/bid/5186
More from Firebox
9.8
CVE-2025-14733
WatchGuard Firebox iked Out of Bounds Write Vulnerability
9.8
CVE-2025-9242
WatchGuard Firebox iked Out of Bounds Write Vulnerability
–
CVE-2002-1519
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and…
–
CVE-2002-1520
The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during…
–
CVE-2000-0783
Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100