CVE-2004-1474: Symantec Firewall VPN Appliance 100

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.

Affected products

• Symantec Firewall VPN Appliance 100: any version
• Symantec Firewall VPN Appliance 200: any version
• Symantec Firewall VPN Appliance 200r: any version
• Symantec Gateway Security 320: any version
• Symantec Gateway Security 360: any version
• Symantec Gateway Security 360r: any version
• Symantec Nexland Isb Soho Firewall Appliance: any version
• Symantec Nexland PRO100 Firewall Appliance: any version
• Symantec Nexland PRO400 Firewall Appliance: any version
• Symantec Nexland PRO800 Firewall Appliance: any version
• Symantec Nexland PRO800TURBO Firewall Appliance: any version
• Symantec Nexland Wavebase Firewall Appliance: any version

Published 2004-12-31. Last modified 2026-06-16.