Lucene search

K

Esoft Security Vulnerabilities

cve
cve

CVE-2007-3786

Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allows remote attackers to perform privileged actions as administrators. NOTE: the vendor disputes the distribution of the vulnerable software, stating that it was a custom build for.....

7AI Score

0.022EPSS

2007-07-15 11:30 PM
22
cve
cve

CVE-2007-3788

The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow context-dependent attackers to obtain sensitive information by reading this...

6.1AI Score

0.006EPSS

2007-07-15 11:30 PM
22
cve
cve

CVE-2007-3787

The eSoft InstaGate EX2 UTM device does not require entry of the old password when changing the admin password, which might allow remote attackers to gain privileges by conducting a CSRF attack, making a password change from an unattended workstation, or other...

7.2AI Score

0.02EPSS

2007-07-15 11:30 PM
20