CVE-2002-1520

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

02/04/2003

Last modified:

03/04/2025

Description

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:C/I:C/A:C CVSS v2.0 Severity and Metrics:

Base Score: 10.00 HIGH
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete

Base Score 2.0

10.00

Severity 2.0

HIGH

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:h:rapidstream:rapidstream:500:::::::*
cpe:2.3:h:rapidstream:rapidstream:2000:::::::*
cpe:2.3:h:rapidstream:rapidstream:4000:::::::*
cpe:2.3:h:rapidstream:rapidstream:6000:::::::*
cpe:2.3:h:rapidstream:rapidstream:8000:::::::*
cpe:2.3:h:watchguard:firebox:v10:::::::*
cpe:2.3:h:watchguard:firebox:v60:::::::*
cpe:2.3:h:watchguard:firebox:v80:::::::*
cpe:2.3:h:watchguard:firebox:v100:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:h:rapidstream:rapidstream:500:::::::*
cpe:2.3:h:rapidstream:rapidstream:2000:::::::*
cpe:2.3:h:rapidstream:rapidstream:4000:::::::*
cpe:2.3:h:rapidstream:rapidstream:6000:::::::*
cpe:2.3:h:rapidstream:rapidstream:8000:::::::*
cpe:2.3:h:watchguard:firebox:v10:::::::*
cpe:2.3:h:watchguard:firebox:v60:::::::*
cpe:2.3:h:watchguard:firebox:v80:::::::*
cpe:2.3:h:watchguard:firebox:v100:::::::*

CVE-2002-1520

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools