← Vulnerability feed

Vulnerability record · CVE-2004-0190 · published 15 March 2004

CVE-2004-0190: Symantec firewall vpn appliance 100 vulnerability

Symantec · Firewall Vpn Appliance 100

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges.

7.5 CVSS 2.0 High EPSS 1.4% · top 28.7%
7.5CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.html
http://marc.info/?l=bugtraq&m=107694794031839&w=2
http://www.osvdb.org/4117
http://www.securityfocus.com/bid/9784 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15212
http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.html
http://marc.info/?l=bugtraq&m=107694794031839&w=2
http://www.osvdb.org/4117
http://www.securityfocus.com/bid/9784 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15212

Track CVE-2004-0190 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-3768Symantec enterprise firewall vulnerabilityBuffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gatew…EPSS 3.8%6.4CVE-2005-0618Nexland pro800turbo vulnerabilityThe SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R fir…EPSS 1.0%5.0CVE-2004-1472Symantec firewall vpn appliance 100 vulnerabilitySymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (devi…EPSS 3.7%5.0CVE-2004-1473Symantec firewall vpn appliance 100 vulnerabilitySymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware …EPSS 3.9%5.0CVE-2004-1474Symantec firewall vpn appliance 100 vulnerabilitySymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware …EPSS 3.2%5.0CVE-2002-1937Symantec firewall vpn appliance 100 vulnerabilitySymantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote a…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2004-0190), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.