NetSight
IP …
medium5.0

CVE-2002-1937

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers t…

Impact

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password.

Affected products

VendorProductAffected versions
SymantecFirewall Vpn Appliance 100
All versions
SymantecFirewall Vpn Appliance 200
All versions
SymantecFirewall Vpn Appliance 200r
All versions

References