CVE-2004-1474 Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community...
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec firewall vpn appliance 100 | All versions | No fix listed |
| symantec firewall vpn appliance 200 | All versions | No fix listed |
| symantec firewall vpn appliance 200r | All versions | No fix listed |
| symantec gateway security 320 | All versions | No fix listed |
| symantec gateway security 360 | All versions | No fix listed |
| symantec gateway security 360r | All versions | No fix listed |
| symantec nexland isb soho firewall appliance | All versions | No fix listed |
| symantec nexland pro100 firewall appliance | All versions | No fix listed |
| symantec nexland pro400 firewall appliance | All versions | No fix listed |
| symantec nexland pro800 firewall appliance | All versions | No fix listed |
| symantec nexland pro800turbo firewall appliance | All versions | No fix listed |
| symantec nexland wavebase firewall appliance | All versions | No fix listed |
References
- 20040922 Multiple Vulnerabilities in Symantec Enterprise Firewall/Gateway Security Products mailing-list
- 12635 third-party-advisory
- securityresponse.symantec.com patch vendor-advisory
- VU#173910 patch third-party-advisory us-government-resource
- 10206 vdb-entry
- 11237 patch vdb-entry
- symantec-default-snmp(17471) vdb-entry