Unrated severityNVD Advisory· Published Jun 27, 2007· Updated Apr 23, 2026
CVE-2007-3464
CVE-2007-3464
Description
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors.
Affected products
1- cpe:2.3:h:sofaware:safe_at_office_500_utm:*:*:*:*:*:*:*:*Range: <=embedded_ngx_7.0.39_ga
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.