CVE-2002-1520 The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows r...
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rapidstream | = 500 | No fix listed |
| rapidstream | = 2000 | No fix listed |
| rapidstream | = 4000 | No fix listed |
| rapidstream | = 6000 | No fix listed |
| rapidstream | = 8000 | No fix listed |
| WatchGuard firebox | = v10 | No fix listed |
| WatchGuard firebox | = v60 | No fix listed |
| WatchGuard firebox | = v80 | No fix listed |
| WatchGuard firebox | = v100 | No fix listed |
References
- 20020926 Watchguard firewall appliances security issues mailing-list
- 20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances mailing-list
- firebox-vclass-cli-admin-privileges(10218) patch vdb-entry vendor-advisory
- 4831 vdb-entry
- 5815 patch vdb-entry vendor-advisory