CVE-2004-1473
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...
CVE-2004-1473 is a medium vulnerability (CVSS 5.0) in Symantec Gateway Security 320, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.94%, the 90th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.94%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
Exploit likelihood
Affected products
- symantec gateway security 320
- symantec firewall vpn appliance 100
- symantec firewall vpn appliance 200
- symantec firewall vpn appliance 200r
- symantec gateway security 360
- symantec gateway security 360r
- symantec nexland isb soho firewall appliance
- symantec nexland pro100 firewall appliance
- symantec nexland pro400 firewall appliance
- symantec nexland pro800 firewall appliance
- symantec nexland pro800turbo firewall appliance
- symantec nexland wavebase firewall appliance
What each source reports
NVD Score used
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
CVE-2004-1473- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
CVE-2004-1473- Updated
- 2026-11-02
EUVDEUVD-2004-1467No score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
EUVD-2004-1467- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h3mh-3qjr-q9rgNo score
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and...
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
- Record
GHSA-h3mh-3qjr-q9rg- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/17470
secunia.com/advisories/12635
securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
marc.info?l=bugtraq&m=109588376426070&w=2
securityfocus.com/bid/11237
osvdb.org/10205
kb.cert.org/vuls/id/329230
nvd.nist.gov/vuln/detail/CVE-2004-1473
github.com/advisories/GHSA-h3mh-3qjr-q9rg