VULNERABILITY INTELLIGENCE

CVE-2007-3786

CVSS score9.3 HIGH
EPSS probability2.55%
CISA KEVNot currently listed
Published2007-07-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allows remote attackers to perform privileged actions as administrators. NOTE: the vendor disputes the distribution of the vulnerable software, stating that it was a custom build for a former customer

Primary references