Skip to content

CVE-2007-3464 Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileg...

HighCVSS 8.5 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors.

Affected products

ProductAffected versionsFixed in
sofaware safe at office 500 utm <= embedded_ngx_7.0.39_ga No fix listed

References