CVE-2007-6098

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-22 · updated 2026-06-16

Description

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.

Affected products

Ingate Firewall: through 4.5.2
Ingate Siparator: through 4.5.2

References

http://www.ingate.com/relnote-460.php
http://www.securityfocus.com/bid/26486
http://www.ingate.com/relnote-460.php
http://www.securityfocus.com/bid/26486

Get alerted when CVE-2007-6098 or the next vulnerability affects your stack