Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-3786
HistoryJul 15, 2007 - 11:30 p.m.

CVE-2007-3786

2007-07-1523:30:00
[email protected]
web.nvd.nist.gov
23
cve-2007-3786
cross-site request forgery
csrf vulnerability
esoft instagate ex2 utm
firmware 3.1.20070615
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.8%

JSON

Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allows remote attackers to perform privileged actions as administrators. NOTE: the vendor disputes the distribution of the vulnerable software, stating that it was a custom build for a former customer

Affected configurations

NVD
Node
esoftinstagate_ex2_utmMatchfirmware_3.1.20031001
OR
esoftinstagate_ex2_utmMatchfirmware_3.1.20060921
OR
esoftinstagate_ex2_utmMatchfirmware_3.1.20070605

Related

cvelist 1
nvd 1
prion 1
cvelist
cvelist
CVE-2007-3786
2007-07-15 23:00:00
nvd
nvd
CVE-2007-3786
2007-07-15 23:30:00
prion
prion
Cross site request forgery (csrf)
2007-07-15 23:30:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.8%

JSON
Related for CVE-2007-3786
cvelist1nvd1prion1