CVE-2007-3787: Esoft Instagate EX2 UTM

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The eSoft InstaGate EX2 UTM device does not require entry of the old password when changing the admin password, which might allow remote attackers to gain privileges by conducting a CSRF attack, making a password change from an unattended workstation, or other attacks.

Affected products

• Esoft Instagate EX2 UTM: version firmware_3.1.20031001 only; version firmware_3.1.20060921 only; version firmware_3.1.20070605 only

Published 2007-07-15. Last modified 2026-06-16.