ARP Spoofing Vulnerability in Symantec Firewall/VPN Appliance

CVE-2002-1937

Summary

The Symantec Firewall/VPN Appliance versions 100 through 200R have a vulnerability where the administrator's MAC address is hardcoded in the configuration. This flaw allows remote attackers to impersonate the administrator by spoofing the hardcoded MAC address, enabling them to execute ARP poisoning attacks. As a consequence, attackers can intercept network traffic, perform man-in-the-middle attacks, and potentially gain unauthorized access to sensitive information, including the administrator's password.

References