CVE-2004-1474
Medium
Description
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
SeverityMedium
CVSS5.0
Exploit probability—
ProductSymantec Firewall Vpn Appliance
PublishedDec 31, 2004
First seenDec 31, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec firewall_vpn_appliance_100 | No range specified | — |
| symantec firewall_vpn_appliance_200 | No range specified | — |
| symantec firewall_vpn_appliance_200r | No range specified | — |
| symantec gateway_security_320 | No range specified | — |
| symantec gateway_security_360 | No range specified | — |
| symantec gateway_security_360r | No range specified | — |
| symantec nexland_isb_soho_firewall_appliance | No range specified | — |
| symantec nexland_pro100_firewall_appliance | No range specified | — |
| symantec nexland_pro400_firewall_appliance | No range specified | — |
| symantec nexland_pro800_firewall_appliance | No range specified | — |
| symantec nexland_pro800turbo_firewall_appliance | No range specified | — |
| symantec nexland_wavebase_firewall_appliance | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.