How severe is CVE-2007-4202?

CVE-2007-4202 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2007-4202 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (65th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-4202?

CVE-2007-4202 affects Guidance Software Encase. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-4202?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-4202 published?

CVE-2007-4202 was published on 2007-08-08 and last updated on 2026-06-16.

CVE-2007-4202

CVE-2007-4202 is a medium-severity vulnerability in Guidance Software Encase with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 1% (65th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Guidance Software Encase
Published: 2007-08-08
Last modified: 2026-06-16

Description

Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image.

Frequently asked questions

What is CVE-2007-4202?: Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image.
How severe is CVE-2007-4202?: CVE-2007-4202 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2007-4202 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (65th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-4202?: CVE-2007-4202 affects Guidance Software Encase. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2007-4202?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-4202 published?: CVE-2007-4202 was published on 2007-08-08 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:guidance_software:encase:6.0:*:enterprise_edition:*:*:*:*:*

More vulnerabilities in Guidance Software Encase

CVE-2007-4201 — Medium (CVSS 5.0): Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow…
CVE-2007-4035 — Medium (CVSS 5.0): Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which…
CVE-2007-4194 — Medium (CVSS 4.3): Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service (stack memory…
CVE-2007-4037 — Medium (CVSS 4.3): Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a…
CVE-2007-4036 — Medium (CVSS 4.3): Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted…
CVE-2005-1578 — Low (CVSS 2.1): EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide…

All CVEs affecting Guidance Software Encase →