CVE-2007-6098

EPSS 0.3%
Published 22.11.2007 00:46:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Ingate ≫ Ingate Firewall Version <= 4.5.2

Ingate ≫ Ingate Siparator Version <= 4.5.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.3%	0.499

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.ingate.com/relnote-460.php

http://www.securityfocus.com/bid/26486

https://nvd.nist.gov/vuln/detail/CVE-2007-6098

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-6098

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-6098

EUVD