CVE:CVE-2004-1473
CNNVD:CNNVD-200412-900
Symantec Enterprise Firewall/VPN是企业级防火墙/VPN系统。
Symantec Enterprise Firewall/VPN存在默认公共串，远程攻击者可以利用这个值获得敏感信息，或进行部分配置操作。
防火墙存在默认的读/写公共字符串，攻击者可以借此收集和更改防火墙配置。通过组合其他漏洞，攻击者可以对WAN接口发送SNMP GET/SET请求。
solution:Upgrade symantec firewall_vpn_appliance_100 to a higher version than *; Upgrade symantec firewall_vpn_appliance_200 to a higher version than *; Upgrade symantec firewall_vpn_appliance_200r to a higher version than *; Upgrade symantec gateway_security_320 to a higher version than *; Upgrade symantec gateway_security_360 to a higher version than *; Upgrade symantec gateway_security_360r to a higher version than *; Upgrade symantec nexland_isb_soho_firewall_appliance to a higher version than *; Upgrade symantec nexland_pro100_firewall_appliance to a higher version than *; Upgrade symantec nexland_pro400_firewall_appliance to a higher version than *; Upgrade symantec nexland_pro800_firewall_appliance to a higher version than *; Upgrade symantec nexland_pro800turbo_firewall_appliance to a higher version than *; Upgrade symantec nexland_wavebase_firewall_appliance to a higher version than *