Symantec Firewall VPN Appliance 100 vulnerabilities

6 CVEs affecting Symantec Firewall VPN Appliance 100, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-3768, published 2005-11-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1473, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days. Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass…
CVE-2005-3768, published 2005-11-23. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products,…
CVE-2004-1472, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days. Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN…
CVE-2004-1474, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP…
CVE-2004-0190, published 2004-03-15. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows…
CVE-2002-1937, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address…