CVE-2007-6098
Last modified
CVE-2007-6098 is a vulnerability of currently unknown severity. Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.. EPSS estimates a 0.99% chance of exploitation in the next 30 days.
Description
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ingate | Ingate Firewall | <= 4.5.2 |
| Ingate | Ingate Siparator | <= 4.5.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-6098?
How severe is CVE-2007-6098?
How do I fix CVE-2007-6098?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-6092Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 a…
- CVE-2007-6093The SRTP implementation in Ingate Firewall before 4.6.0 and …
- CVE-2007-6094The IPsec module in the VPN component in Ingate Firewall bef…
- CVE-2007-6095The SIP component in Ingate Firewall before 4.6.0 and SIPara…
- CVE-2007-6096Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use …
- CVE-2007-6097Unspecified vulnerability in the ICMP implementation in Inga…
- CVE-2007-6099Unspecified vulnerability in Ingate Firewall before 4.6.0 an…
- CVE-2007-6100Cross-site scripting (XSS) vulnerability in libraries/auth/c…
- CVE-2007-6101Ability Mail Server before 2.61 allows remote authenticated …
- CVE-2007-6102Cross-site scripting (XSS) vulnerability in Feed to JavaScri…
- CVE-2007-6103I Hear U (IHU) 0.5.6 and earlier allows remote attackers to …
- CVE-2007-6104Cross-site scripting (XSS) vulnerability in the Instant Web …
Are you affected by CVE-2007-6098?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST