Vulnerabilities (CVE)

Filtered by vendor Sofaware Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3462 1 Sofaware 1 Safe At Office 500 Utm 2024-02-28 6.0 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network.
CVE-2007-3465 1 Sofaware 1 Safe At Office 500 Utm 2024-02-28 10.0 HIGH N/A
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password.
CVE-2007-3464 1 Sofaware 1 Safe At Office 500 Utm 2024-02-28 8.5 HIGH N/A
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors.