CVE-2007-0471: checkpoint connectra_ngx
Vulnerability summary
CVE-2007-0471 is a high (CVSS 7.5) vulnerability in checkpoint connectra_ngx. EPSS estimates a 2.71% chance of exploitation in the next 30 days, higher than 85.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 24-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.71%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.71% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (lists.grok.org.uk)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Checkpoint1 product
- connectra_ngx≤ r62
1 vendor · 1 product
References
14 links- lists.grok.org.uk/pipermail/full-disclosure/2007-January/051920.htmlMailing ListX Refsource FULLDISCExploitVendor Advisory
- www.checkpoint.com/downloads/latest/hfa/connectra/security_r62.htmlX Refsource CONFIRM
Show all 14 references
- updates.checkpoint.com/fileserver/ID/7126/FILE/VPN-1_Hotfix1.pdfX Refsource MISC