Remote Configuration Alteration in Symantec Firewall Appliances

CVE-2004-1474

Summary

The vulnerability in Symantec Enterprise Firewall and Gateway Security appliances arises from the use of a default read/write SNMP community string. This configuration flaw can be exploited by remote attackers to modify the firewall's configuration file, leading to potential unauthorized access and manipulation of network security settings. Affected models include various versions of the Symantec Enterprise Firewall/VPN Appliances and Gateway Security, which may expose systems to significant security risks if not updated.

References