CVE-2004-1474: Medium severity Symantec Gateway Security 360 vulnerability
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1474?
CVE-2004-1474 is considered a critical vulnerability due to the potential for remote attackers to change firewall configurations.
How do I fix CVE-2004-1474?
To fix CVE-2004-1474, update your Symantec firewall or VPN appliances firmware to version 1.63 or later for the applicable models.
Which products are affected by CVE-2004-1474?
CVE-2004-1474 affects several models including the Symantec Firewall VPN Appliance 100, 200, 200R, and the Gateway Security 320, 360, 360R running outdated firmware.
Can CVE-2004-1474 be exploited remotely?
Yes, the vulnerability in CVE-2004-1474 allows remote attackers to exploit the default SNMP community string.
What is the impact of CVE-2004-1474 on my network?
The impact of CVE-2004-1474 on your network could be significant, as it allows unauthorized changes to firewall settings which could lead to loss of security and data.