CVE-2002-0602: Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a...

Security readout for executives and security teams

This old Snapgear Lite+ firewall issue can let a remote attacker crash the device by opening many connections to its web management or PPTP service. The business risk is service disruption, especially if these interfaces are reachable from untrusted networks. Exposure is most likely in legacy environments still running Snapgear Lite+ 1.5.3 or 1.5.4, especially where HTTP management or PPTP is reachable externally. Modern environments are unlikely to be affected unless unsupported appliances remain deployed. Treat this as a legacy perimeter availability risk. Prioritize action if affected devices protect business-critical networks or expose management or PPTP services to the internet. Mitigation focus: Inventory for Snapgear Lite+ firewall appliances and firmware versions.; Remove or replace unsupported Snapgear Lite+ devices where feasible.; Restrict HTTP management access to trusted administrative networks only..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.