← Vulnerability feed

Vulnerability record · CVE-2002-1520 · published 2 April 2003

CVE-2002-1520: Rapidstream vulnerability

RRapidstream · Rapidstream

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.

10.0 CVSS 2.0 High EPSS 2.8% · top 14.3%
10.0CVSS 2.0 base score
2.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html
http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html
http://www.iss.net/security_center/static/10218.php PatchVendor Advisory
http://www.osvdb.org/4831
http://www.securityfocus.com/bid/5815 PatchVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html
http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html
http://www.iss.net/security_center/static/10218.php PatchVendor Advisory
http://www.osvdb.org/4831
http://www.securityfocus.com/bid/5815 PatchVendor Advisory

Track CVE-2002-1520 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2002-1519Rapidstream vulnerabilityFormat string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to …EPSS 4.3%10.0CVE-2000-0784Rapidstream vulnerabilitysshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to exec…EPSS 3.1%5.0CVE-2002-1046Watchguard firebox vulnerabilityDynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) v…EPSS 1.7%5.0CVE-2000-0783Watchguard firebox vulnerabilityWatchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100.EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2002-1520), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.