CVE-2002-2150 json
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables wi…
published 2002-12-31 23 y ago modified 2026-06-16 4 mo ago also EUVD-2002-2129
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.0%
- EPSS 2.0% chance of exploitation in 30 days, percentile 80%
- public exploits
- 0
- none known
Summary
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.
Exploit prediction
1.99% chance of exploitation in the next 30 days, higher than 80% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
-
securityfocus.com
/bid/6023
vdb-entry
-
kb.cert.org
/vuls/id/539363
third-party-advisory, us-government-resource
-
iss.net
/security_center/static/10449.php
vdb-entry
Sources
- CVE List CVE-2002-2150
- NVD CVE-2002-2150
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.