LiveActive security incident?Get immediate response
CVE Record

CVE-2001-0530: Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content in...

Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysis

Security readout for executives and security teams

This old vulnerability affects SpearHead NetGAP 200 and 300 systems before build 78. A remote attacker could use specially encoded URLs to get around file blocking and content inspection, reducing the appliance’s value as a security control. Exposure is likely limited to organizations still running legacy SpearHead NetGAP 200 or 300 appliances before build 78. If these devices are retired, upgraded, or not enforcing content controls, practical exposure is low. Treat as a legacy control assurance issue. Prioritize only if these appliances still protect important traffic or enforce compliance-sensitive file restrictions. Mitigation focus: Inventory SpearHead NetGAP 200 and 300 deployments.; Verify whether any appliance is older than build 78.; Check vendor or archival guidance for the build 78 remediation path..

Prepared

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2001-0530 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.