Unscored severity · published Dec 31, 2002
CVE-2002-2150
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1)…
–
CVSS
2%
EPSS
No
On KEV
Description
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Netscreen Screenos · Juniper
2.7.1; 2.7.1r1; 2.7.1r2; 2.7.1r3; 2.10_r3; 2.10_r4; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2150
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2150
www.iss.net
http://www.iss.net/security_center/static/10449.php
Third Party Advisory
http://www.kb.cert.org/vuls/id/539363
www.securityfocus.com
http://www.securityfocus.com/bid/6023
More from Netscreen Screenos
5.4
CVE-2018-0059
A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive…
–
CVE-2008-6096
Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user…
–
CVE-2005-2640
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to…
–
CVE-2004-1446
Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service (device reboot or hang) via a crafted…
–
CVE-2002-1547
Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management…