CVE-2007-3177

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter.

Ingate Firewall y SIParator anterior a 4.5.2 permite a atacantes remotos evitar la validación SIP a través de ciertos parámetros maddr.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-06-11 CVE Reserved
2007-06-11 CVE Published
2024-04-14 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-287: Improper Authentication

CAPEC

References (5)

URL	Tag	Source
http://osvdb.org/36708	Vdb Entry
http://www.ingate.com/relnote-452.php	X_refsource_confirm
http://www.vupen.com/english/advisories/2007/1973	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34887	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/25420	2017-07-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ingate Search vendor "Ingate"		Ingate Firewall Search vendor "Ingate" for product "Ingate Firewall"				<= 4.5.1 Search vendor "Ingate" for product "Ingate Firewall" and version " <= 4.5.1"		-		Affected
Ingate Search vendor "Ingate"		Ingate Siparator Search vendor "Ingate" for product "Ingate Siparator"				<= 4.5.1 Search vendor "Ingate" for product "Ingate Siparator" and version " <= 4.5.1"		-		Affected