CVE-2002-2150: Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote at...

Security readout for executives and security teams

This CVE describes a denial-of-service weakness in stateful firewalls. An attacker can send enough traffic to fill the firewall's connection state table faster than it is cleared, causing the firewall to reject new legitimate connections. The source bundle does not identify specific affected products or vendor fixes. Exposure is most relevant to internet-facing or perimeter stateful firewalls that maintain connection tables. The source bundle lists affected vendor and product as n/a, so product-specific exposure cannot be determined from the provided evidence. Treat this as an availability risk for critical network edges, but avoid emergency action without product confirmation. Prioritize inventory and vendor verification because the CVE record lacks affected product details and patch information. Mitigation focus: Identify perimeter firewalls that maintain state tables for inbound or outbound connections.; Review CERT VU#539363 and each firewall vendor's guidance for affected models and supported fixes.; Apply vendor-provided updates or configuration recommendations where explicitly available..

Prepared

Jun 29, 2026, 16:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.