CVEvulnerability
CVE-2007-3462
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Description
Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network.
Affected configurations
• sofaware safe at office 500 utm embedded ngx 7.0.39 ga
References
- http://labs.calyptix.com/CX-2007-04.php Patch
- http://labs.calyptix.com/CX-2007-04.txt labs.calyptix.com
- http://osvdb.org/37644 osvdb.org
- http://secunia.com/advisories/25822 secunia.com
- http://www.securityfocus.com/archive/1/472290/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1018317 www.securitytracker.com
- http://www.sofaware.com/supportDownloads.aspx?boneId=182 www.sofaware.com
- http://www.vupen.com/english/advisories/2007/2364 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35093 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35094 exchange.xforce.ibmcloud.com
- http://labs.calyptix.com/CX-2007-04.php Patch
- http://labs.calyptix.com/CX-2007-04.txt labs.calyptix.com
- http://osvdb.org/37644 osvdb.org
- http://secunia.com/advisories/25822 secunia.com
- http://www.securityfocus.com/archive/1/472290/100/0/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1018317 www.securitytracker.com
- http://www.sofaware.com/supportDownloads.aspx?boneId=182 www.sofaware.com
- http://www.vupen.com/english/advisories/2007/2364 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35093 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35094 exchange.xforce.ibmcloud.com