CVE-2007-3788 The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document.
HighCVSS 7.6
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| esoft instagate ex2 utm | = firmware_3.1.20031001 | No fix listed |
| esoft instagate ex2 utm | = firmware_3.1.20060921 | No fix listed |
| esoft instagate ex2 utm | = firmware_3.1.20070605 | No fix listed |
References
- labs.calyptix.com patch vendor-advisory
- labs.calyptix.com patch vendor-advisory
- 38173 vdb-entry
- 26005 third-party-advisory
- 20070711 Calyptix Security Advisory CX-2007-05 - eSoft InstaGate EX2 Cross-Site Request Forgery Attack mailing-list