CVE-2007-6385: Kerio Winroute Firewall

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected products

• Kerio Winroute Firewall: up to and including 6.4.0; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4 only; version 5.0.5 only; …

Published 2007-12-15. Last modified 2026-06-16.