CVE Catalog

CVE-2000-0181

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.58%

72th percentile - higher than 72% of all known CVEs

Summary

Firewall-1 versions 3.0 and 4.0 leak packets containing private IP address information, which could allow remote attackers to determine the real IP address of the host making the connection.

Risk Assessment

The exposure of the real IP address may lead to an increased risk of attacks on the organization's network infrastructure.

Recommendation

It is recommended to upgrade to the latest version of Firewall-1 to minimize the risk associated with leaking IP address information.

Original NVD description (English source)

Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS