// For flags

CVE-2007-6098

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.

Ingate Firewall anterior a 4.6.0 y SIParator anterior a 4.6.0 no registra paquetes truncados (1) ICMP, (2) UDP, y (3) TCP, lo cual tiene impacto y vectores de ataque desconocidos; y tampoco registra (4) intentos de inicio de sesión por consola de usuarios no existentes, lo cual podría facilitar a los atacantes con acceso físico adivinar credenciales válidas de inicio de sesión evitando ser detectados.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-11-21 CVE Reserved
  • 2007-11-22 CVE Published
  • 2024-04-25 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (2)
URL Tag Source
http://www.ingate.com/relnote-460.php X_refsource_confirm
http://www.securityfocus.com/bid/26486 Vdb Entry
URL Date SRC
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ingate
Search vendor "Ingate"
 Ingate Firewall
Search vendor "Ingate" for product "Ingate Firewall"
 <= 4.5.2
Search vendor "Ingate" for product "Ingate Firewall" and version " <= 4.5.2"
-
Affected
Ingate
Search vendor "Ingate"
 Ingate Siparator
Search vendor "Ingate" for product "Ingate Siparator"
 <= 4.5.2
Search vendor "Ingate" for product "Ingate Siparator" and version " <= 4.5.2"
-
Affected