« Volver al listado

CVE-2004-1474

Estado: ModificadaMedia (5)—

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (12)

Symantec — Firewall VPN Appliance 100Symantec — Firewall VPN Appliance 200Symantec — Firewall VPN Appliance 200rSymantec — Gateway Security 320Symantec — Gateway Security 360Symantec — Gateway Security 360rSymantec — Nexland ISB Soho Firewall ApplianceSymantec — Nexland Pro100 Firewall ApplianceSymantec — Nexland Pro400 Firewall ApplianceSymantec — Nexland Pro800 Firewall ApplianceSymantec — Nexland Pro800turbo Firewall ApplianceSymantec — Nexland Wavebase Firewall Appliance

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-1474",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=109588376426070&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/12635",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/173910",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/10206",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/11237",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17471",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=109588376426070&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/12635",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/173910",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/10206",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/11237",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17471",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file."
    }
  ],
  "lastModified": "2026-06-16T22:07:46.767",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5851263-81A6-40AE-8486-E919D5279CC7"
            },
            {
              "criteria": "cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E0D3199-365E-4D26-8D23-6492832EF096"
            },
            {
              "criteria": "cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5081F382-CC20-4C7B-A3F8-08FAF31012D9"
            },
            {
              "criteria": "cpe:2.3:h:symantec:gateway_security_320:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "391E553B-0A8C-4934-8B7C-DD6C0F9FF1A7"
            },
            {
              "criteria": "cpe:2.3:h:symantec:gateway_security_360:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEDE5E45-0984-4F8B-8FCE-52E0FBA3DEEC"
            },
            {
              "criteria": "cpe:2.3:h:symantec:gateway_security_360r:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0896A267-AE1E-47C1-9C75-67A238727F45"
            },
            {
              "criteria": "cpe:2.3:h:symantec:nexland_isb_soho_firewall_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EACDC99-3B80-47D8-8BC4-A21CA0BC234B"
            },
            {
              "criteria": "cpe:2.3:h:symantec:nexland_pro100_firewall_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99238614-0234-4550-84FB-8B1C7B8CE1E6"
            },
            {
              "criteria": "cpe:2.3:h:symantec:nexland_pro400_firewall_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "380A5A63-588D-4427-A513-147841B3FB57"
            },
            {
              "criteria": "cpe:2.3:h:symantec:nexland_pro800_firewall_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF31AD20-099E-4323-AE18-40C52878454A"
            },
            {
              "criteria": "cpe:2.3:h:symantec:nexland_pro800turbo_firewall_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9707BBB-8095-451D-80C7-BAC923BCB786"
            },
            {
              "criteria": "cpe:2.3:h:symantec:nexland_wavebase_firewall_appliance:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D072C1C-FC87-4986-9320-EFD9F58F192C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}