CVEvulnerability

CVE-2007-3786

9.3 HIGH Published 2007-07-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allows remote attackers to perform privileged actions as administrators. NOTE: the vendor disputes the distribution of the vulnerable software, stating that it was a custom build for a former customer

Affected configurations

• esoft instagate ex2 utm firmware 3.1.20031001 • esoft instagate ex2 utm firmware 3.1.20060921 • esoft instagate ex2 utm firmware 3.1.20070605

References