CVE-2004-1473
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
Exploit likelihood
What each source reports
NVD Score used
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
CVE-2004-1473- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
CVE-2004-1473- Updated
- 2026-11-02
EUVDEUVD-2004-1467 No score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
EUVD-2004-1467- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h3mh-3qjr-q9rg No score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
GHSA-h3mh-3qjr-q9rg- Updated
- 2026-11-02
Affected products
- symantec gateway security 320
- symantec firewall vpn appliance 100
- symantec firewall vpn appliance 200
- symantec firewall vpn appliance 200r
- symantec gateway security 360
- symantec gateway security 360r
- symantec nexland isb soho firewall appliance
- symantec nexland pro100 firewall appliance
- symantec nexland pro400 firewall appliance
- symantec nexland pro800 firewall appliance
- symantec nexland pro800turbo firewall appliance
- symantec nexland wavebase firewall appliance
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1473 is a medium vulnerability (CVSS 5.0) in Symantec Gateway Security 320, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.94%, the 90th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/17470
secunia.com/advisories/12635
securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
marc.info?l=bugtraq&m=109588376426070&w=2
securityfocus.com/bid/11237
osvdb.org/10205
kb.cert.org/vuls/id/329230
nvd.nist.gov/vuln/detail/CVE-2004-1473
github.com/advisories/GHSA-h3mh-3qjr-q9rg