CVE-2007-3177 Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter.

MediumCVSS 5.0 EPSS 1.4%

Published: 2007-06-12 01:00
Updated: 2026-06-17 01:41
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter.

Affected products

Product	Affected versions	Fixed in
ingate firewall	<= 4.5.1	No fix listed
ingate siparator	<= 4.5.1	No fix listed

References

36708 vdb-entry
25420 third-party-advisory vendor-advisory
www.ingate.com
ADV-2007-1973 vdb-entry
ingate-maddr-authentication-bypass(34887) vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.40% (percentile 72.9)
CWE: CWE-287

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.