CVE-2007-6098 Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-conso...
HighCVSS 7.5
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ingate firewall | <= 4.5.2 | No fix listed |
| ingate siparator | <= 4.5.2 | No fix listed |
References
- www.ingate.com
- 26486 vdb-entry