CVE-2002-1937: Medium severity symantec firewall vpn appliance 200 vulnerability
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1937?
CVE-2002-1937 has a high severity due to its potential for remote exploitation and impact on administrator credentials.
How do I fix CVE-2002-1937?
To fix CVE-2002-1937, update to a patched version of the Symantec Firewall/VPN Appliance that addresses this hardcoded MAC address issue.
What are the affected versions in CVE-2002-1937?
CVE-2002-1937 affects the Symantec Firewall/VPN Appliance versions 100, 200, and 200R.
What type of attack is enabled by CVE-2002-1937?
CVE-2002-1937 enables an ARP poisoning man-in-the-middle attack due to the hardcoded MAC address.
Can CVE-2002-1937 lead to credential theft?
Yes, CVE-2002-1937 can lead to credential theft, allowing attackers to obtain the administrator's password.