VPN Appliance

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

symantec

nessus

NVD

Published: 2004-12-31

Updated: 2017-07-11

Summary

Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.

Vulnerable Configurations

Part	Description	Count
Hardware	Symantec Symantec Firewall VPN Appliance 100 * Symantec Firewall VPN Appliance 200 * Symantec Firewall VPN Appliance 200R * Symantec Gateway Security 320 * Symantec Gateway Security 360 * Symantec Gateway Security 360R * Symantec Nexland ISB Soho Firewall Appliance * Symantec Nexland Pro100 Firewall Appliance * Symantec Nexland Pro400 Firewall Appliance * Symantec Nexland Pro800 Firewall Appliance * Symantec Nexland Pro800Turbo Firewall Appliance * Symantec Nexland Wavebase Firewall Appliance *	12

Nessus

NASL family	SNMP
NASL id	SNMP_DEFAULT_COMMUNITIES.NASL
description	It is possible to obtain the default community names of the remote SNMP server. An attacker can use this information to gain more knowledge about the remote host or to change the configuration of the remote system (if the default community allows such modifications).
last seen	2020-06-01
modified	2020-06-02
plugin id	10264
published	2002-11-25
reporter	This script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/10264
title	SNMP Agent Default Community Names

Summary

Vulnerable Configurations

Nessus

References