CVE-2004-0190: Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page...

Security readout for executives and security teams

This old CVE describes a Symantec FireWall/VPN Appliance model 200 exposing the password for its administration page in cleartext records that may be cached locally or by a proxy. If that password is recovered, an attacker could gain administrative privileges on the appliance. Exposure is most likely in legacy environments still running Symantec FireWall/VPN Appliance model 200 or retaining old administrator workstations, browser caches, proxy logs, or backups from those systems. Treat this as a legacy credential exposure risk. It is not marked as actively exploited, but any remaining affected device could expose administrative control if old cache or proxy data is accessible. Mitigation focus: Identify and retire any remaining Symantec FireWall/VPN Appliance model 200 devices.; Rotate administrator passwords for any potentially affected appliance.; Clear relevant administrator browser caches and proxy caches where feasible..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.