Unscored severity · published Dec 31, 2004
CVE-2004-1473
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
Firewall Vpn Appliance 100 · Symantec
All versions, or not specified · source: NVD
FV
Firewall Vpn Appliance 200 · Symantec
All versions, or not specified · source: NVD
FV
Firewall Vpn Appliance 200r · Symantec
All versions, or not specified · source: NVD
GS
Gateway Security 320 · Symantec
All versions, or not specified · source: NVD
GS
Gateway Security 360 · Symantec
All versions, or not specified · source: NVD
GS
Gateway Security 360r · Symantec
All versions, or not specified · source: NVD
NI
Nexland Isb Soho Firewall Appliance · Symantec
All versions, or not specified · source: NVD
NP
Nexland Pro100 Firewall Appliance · Symantec
All versions, or not specified · source: NVD
NP
Nexland Pro400 Firewall Appliance · Symantec
All versions, or not specified · source: NVD
NP
Nexland Pro800 Firewall Appliance · Symantec
All versions, or not specified · source: NVD
NP
Nexland Pro800turbo Firewall Appliance · Symantec
All versions, or not specified · source: NVD
NW
Nexland Wavebase Firewall Appliance · Symantec
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1473
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1473
marc.info
http://marc.info/?l=bugtraq&m=109588376426070&w=2
secunia.com
http://secunia.com/advisories/12635
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
Patch
http://www.kb.cert.org/vuls/id/329230
www.osvdb.org
http://www.osvdb.org/10205
www.securityfocus.com
http://www.securityfocus.com/bid/11237
More from Firewall Vpn Appliance 100
–
CVE-2005-3768
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN…
–
CVE-2004-1472
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port…
–
CVE-2004-1474
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default…
–
CVE-2004-0190
Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy,…
–
CVE-2002-1937
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the…