CVE-2002-1937: Symantec Firewall VPN Appliance 100

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password.

Affected products

• Symantec Firewall VPN Appliance 100: any version
• Symantec Firewall VPN Appliance 200: any version
• Symantec Firewall VPN Appliance 200r: any version

Published 2002-12-31. Last modified 2026-06-16.