CVE-2004-1473: Symantec Firewall VPN Appliance 100

Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days.

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.

Affected products

• Symantec Firewall VPN Appliance 100: any version
• Symantec Firewall VPN Appliance 200: any version
• Symantec Firewall VPN Appliance 200r: any version
• Symantec Gateway Security 320: any version
• Symantec Gateway Security 360: any version
• Symantec Gateway Security 360r: any version
• Symantec Nexland Isb Soho Firewall Appliance: any version
• Symantec Nexland PRO100 Firewall Appliance: any version
• Symantec Nexland PRO400 Firewall Appliance: any version
• Symantec Nexland PRO800 Firewall Appliance: any version
• Symantec Nexland PRO800TURBO Firewall Appliance: any version
• Symantec Nexland Wavebase Firewall Appliance: any version

Published 2004-12-31. Last modified 2026-06-16.