CVE-2007-6098: Ingate Firewall

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.

Affected products

• Ingate Ingate Firewall: up to and including 4.5.2
• Ingate Ingate Siparator: up to and including 4.5.2

Published 2007-11-22. Last modified 2026-06-16.