CVE-2002-1046: WatchGuard Firebox

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110.

Affected products

• WatchGuard Firebox: version 5.0 only
• WatchGuard Soho Firewall: version 5.0.28 only; version 5.0.29 only; version 5.0.31 only; version 5.0.35 only; version 5.0.35a only

Published 2002-10-04. Last modified 2026-06-16.