Executive Summary
DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.
Why It Matters
CVE-2002-1484 is rated CRITICAL severity, requiring immediate attention from security teams.
CVSS Base Score: 9.8/10
Affected Technologies
Vendors: siemens
Products: db4web
🛡️What Defenders Should Check
Use Vulnios to continuously monitor your exposure to CVE-2002-1484 and similar vulnerabilities.
References & Sources
AI Security Advisor
Powered by Gemini
Get AI-powered security recommendations tailored to this specific threat — including risk assessment, detection guidance, MITRE ATT&CK mapping, and actionable remediation steps.
Affected Products
Sources
Protect Your Organization
Monitor CVEs, scan for vulnerabilities, and get real-time threat alerts — all in one platform.
Get instant alerts on Telegram
Join our public channel for real-time critical CVE alerts.
Follow @vulnios