← Vulnerability feed

Vulnerability record · CVE-2004-1472 · published 31 December 2004

CVE-2004-1472: Symantec firewall vpn appliance 100 vulnerability

Symantec · Firewall Vpn Appliance 100

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface.

5.0 CVSS 2.0 Medium EPSS 3.7% · top 10.6%
5.0CVSS 2.0 base score
3.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
10Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

10 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=109588376426070&w=2
http://secunia.com/advisories/12635
http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html Vendor Advisory
http://www.kb.cert.org/vuls/id/441078 Third Party AdvisoryUS Government Resource
http://www.osvdb.org/10204
http://www.securityfocus.com/bid/11237
https://exchange.xforce.ibmcloud.com/vulnerabilities/17469
http://marc.info/?l=bugtraq&m=109588376426070&w=2
http://secunia.com/advisories/12635
http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html Vendor Advisory
http://www.kb.cert.org/vuls/id/441078 Third Party AdvisoryUS Government Resource
http://www.osvdb.org/10204
http://www.securityfocus.com/bid/11237
https://exchange.xforce.ibmcloud.com/vulnerabilities/17469

Track CVE-2004-1472 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-3768Symantec enterprise firewall vulnerabilityBuffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gatew…EPSS 3.8%7.5CVE-2005-0249Symantec antivirus scan engine vulnerabilityHeap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compresse…EPSS 19%7.5CVE-2004-0190Symantec firewall vpn appliance 100 vulnerabilitySymantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator…EPSS 1.4%7.5CVE-2002-1463Symantec enterprise firewall vulnerabilitySymantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security …EPSS 6.9%7.5CVE-2002-0538Symantec enterprise firewall vulnerabilityFTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to…EPSS 1.7%6.4CVE-2005-0618Nexland pro800turbo vulnerabilityThe SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R fir…EPSS 1.0%5.0CVE-2006-4562Symantec gateway security vulnerabilityThe proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hidi…EPSS 1.4%5.0CVE-2006-2341Symantec enterprise firewall information exposure vulnerabilityThe HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers t…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2004-1472), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.