CVE-2007-6098
Last modified
CVE-2007-6098 is a vulnerability of currently unknown severity. Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.. EPSS estimates a 0.99% chance of exploitation in the next 30 days.
Description
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ingate | Ingate Firewall | <= 4.5.2 |
| Ingate | Ingate Siparator | <= 4.5.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-6098?
How severe is CVE-2007-6098?
How do I fix CVE-2007-6098?
Are you affected by CVE-2007-6098?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
