CVE-2007-6098

EPSS 0.3%
Veröffentlicht 22.11.2007 00:46:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ingate ≫ Ingate Firewall Version <= 4.5.2

Ingate ≫ Ingate Siparator Version <= 4.5.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.499

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.ingate.com/relnote-460.php

http://www.securityfocus.com/bid/26486

https://nvd.nist.gov/vuln/detail/CVE-2007-6098

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-6098

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-6098

EUVD