CVE-2007-3788 describes a critical vulnerability in the eSoft InstaGate EX2 UTM device where the administrator password is inadvertently stored in an accessible HTML document. This flaw allows context-dependent attackers to gain sensitive information, potentially leading to full compromise of the device. With a CVSS score of 7.6, it presents a high severity risk due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
firmware_3.1.20031001CPE matchmatch criteria | cpe:2.3:h:esoft:instagate_ex2_utm:firmware_3.1.20031001:*:*:*:*:*:*:* | ||
firmware_3.1.20060921CPE matchmatch criteria | cpe:2.3:h:esoft:instagate_ex2_utm:firmware_3.1.20060921:*:*:*:*:*:*:* | ||
firmware_3.1.20070605CPE matchmatch criteria | cpe:2.3:h:esoft:instagate_ex2_utm:firmware_3.1.20070605:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:H/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.