CVE-2007-3462

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...

Default credentials

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...

CVE-2007-3462

CVE-2007-3462 describes a Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office. The affected component: Safe@Office firmware prior to Embedded NGX 7.0.45 GA. Impact per the descriptions: remote attackers could execute commands as arbitrary users and disable firewall...

CVE-2007-3465: Undefined Security Weakness

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password...

CVE-2007-3464: Undefined Security Weakness

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other...

CVE-2007-3462: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network...