CVE-2004-1474
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...
CVE-2004-1474 is a medium vulnerability (CVSS 5.0) in Symantec Gateway Security 320, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.23%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
Exploit likelihood
Affected products
- symantec gateway security 320
- symantec firewall vpn appliance 100
- symantec firewall vpn appliance 200
- symantec firewall vpn appliance 200r
- symantec gateway security 360
- symantec gateway security 360r
- symantec nexland isb soho firewall appliance
- symantec nexland pro100 firewall appliance
- symantec nexland pro400 firewall appliance
- symantec nexland pro800 firewall appliance
- symantec nexland pro800turbo firewall appliance
- symantec nexland wavebase firewall appliance
What each source reports
NVD Score used
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
- Record
CVE-2004-1474- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
- Record
CVE-2004-1474- Updated
- 2026-11-02
EUVDEUVD-2004-1468No score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
- Record
EUVD-2004-1468- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fgq9-ggr2-vg42No score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
- Record
GHSA-fgq9-ggr2-vg42- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/12635
securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
kb.cert.org/vuls/id/173910
marc.info?l=bugtraq&m=109588376426070&w=2
osvdb.org/10206
exchange.xforce.ibmcloud.com/vulnerabilities/17471
securityfocus.com/bid/11237
nvd.nist.gov/vuln/detail/CVE-2004-1474
github.com/advisories/GHSA-fgq9-ggr2-vg42