How severe is CVE-2007-6096?

CVE-2007-6096 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2007-6096 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (60th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-6096?

CVE-2007-6096 primarily affects Ingate Ingate Firewall. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-6096?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-6096 published?

CVE-2007-6096 was published on 2007-11-22 and last updated on 2026-06-16.

CVE-2007-6096

CVE-2007-6096 is a medium-severity vulnerability in Ingate Ingate Firewall with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-255.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 1% (60th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-255
Affected product: Ingate Ingate Firewall
Published: 2007-11-22
Last modified: 2026-06-16

Description

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors.

Frequently asked questions

What is CVE-2007-6096?: Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors.
How severe is CVE-2007-6096?: CVE-2007-6096 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2007-6096 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (60th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-6096?: CVE-2007-6096 primarily affects Ingate Ingate Firewall. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2007-6096?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-6096 published?: CVE-2007-6096 was published on 2007-11-22 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:h:ingate:ingate_firewall:*:*:*:*:*:*:*:*
cpe:2.3:h:ingate:ingate_siparator:*:*:*:*:*:*:*:*

More vulnerabilities in Ingate Ingate Firewall

CVE-2007-6092 — Critical (CVSS 10.0): Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack…
CVE-2007-6099 — Critical (CVSS 10.0): Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open…
CVE-2007-6097 — Critical (CVSS 10.0): Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has…
CVE-2007-6098 — High (CVSS 7.5): Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets,…
CVE-2003-1112 — High (CVSS 7.5): The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote…
CVE-2007-6093 — High (CVSS 7.1): The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a…

All CVEs affecting Ingate Ingate Firewall →

Other CWE-255 (Credentials Management Errors) vulnerabilities

CVE-2016-0898 — Critical (CVSS 10.0): MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were…
CVE-2015-7906 — Critical (CVSS 10.0): LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash…
CVE-2015-7856 — Critical (CVSS 10.0): OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access…
CVE-2014-9736 — Critical (CVSS 10.0): GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the (1) SSL key…
CVE-2014-7233 — Critical (CVSS 10.0): GE Healthcare Precision THUNIS-800+ has a default password of (1) 1973 for the factory default System Utilities menu,…
CVE-2014-7232 — Critical (CVSS 10.0): GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for the xruser…

Browse all CWE-255 (Credentials Management Errors) vulnerabilities →