← Vulnerability feed

Vulnerability record · CVE-2004-1473 · published 31 December 2004

CVE-2004-1473: Symantec firewall vpn appliance 100 vulnerability

Symantec · Firewall Vpn Appliance 100

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.

5.0 CVSS 2.0 Medium EPSS 3.9% · top 10.0%
5.0CVSS 2.0 base score
3.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
12Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

12 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=109588376426070&w=2
http://secunia.com/advisories/12635
http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html PatchVendor Advisory
http://www.kb.cert.org/vuls/id/329230 PatchThird Party AdvisoryUS Government Resource
http://www.osvdb.org/10205
http://www.securityfocus.com/bid/11237
https://exchange.xforce.ibmcloud.com/vulnerabilities/17470
http://marc.info/?l=bugtraq&m=109588376426070&w=2
http://secunia.com/advisories/12635
http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html PatchVendor Advisory
http://www.kb.cert.org/vuls/id/329230 PatchThird Party AdvisoryUS Government Resource
http://www.osvdb.org/10205
http://www.securityfocus.com/bid/11237
https://exchange.xforce.ibmcloud.com/vulnerabilities/17470

Track CVE-2004-1473 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-3768Symantec enterprise firewall vulnerabilityBuffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gatew…EPSS 3.8%7.5CVE-2004-0190Symantec firewall vpn appliance 100 vulnerabilitySymantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator…EPSS 1.4%6.4CVE-2005-0618Nexland pro800turbo vulnerabilityThe SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R fir…EPSS 1.0%5.0CVE-2004-1472Symantec firewall vpn appliance 100 vulnerabilitySymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (devi…EPSS 3.7%5.0CVE-2004-1474Symantec firewall vpn appliance 100 vulnerabilitySymantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware …EPSS 3.2%5.0CVE-2002-1937Symantec firewall vpn appliance 100 vulnerabilitySymantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote a…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2004-1473), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.