Back to CVE Browser

CVE-2000-0894

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0580%

EPSS Percentile22.94th

PublishedFeb 12, 2001

Last ModifiedApr 16, 2026

Vulnerability Description

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.

Affected Platforms (CPE)

🔌

Watchguard

Soho Firewall

= 1.6

🔌

Watchguard

Soho Firewall

= 2.1.3

References & Advisories

🔗 http://www.osvdb.org/4404

🔗 http://www.securityfocus.com/bid/2119

🔗 http://xforce.iss.net/alerts/advise70.php

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5554

🔗 http://www.osvdb.org/4404

🔗 http://www.securityfocus.com/bid/2119

🔗 http://xforce.iss.net/alerts/advise70.php

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5554

Related Vulnerabilities

CVE-2002-052810.0

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the ad...

CVE-2000-089510.0

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly e...

CVE-2001-03767.5

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128...

CVE-2002-10477.5

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an inco...