Clavister

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Clavister records in CISA KEV

No Clavister vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Clavister Coreplus 3 records MEDIUM Clavister Firewall 1 record LOW Clavister Security Gateway 1 record LOW Cos Core 1 record LOW

Records

3 records in Clavister Coreplus · all components

TI-2007-03687 CVE-2007-3803 · GHSA-rfrf-3h83-9qr2

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse…

MEDIUM 47

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02262 Published 2007-07-16 No fix listed

TI-2007-03688 CVE-2007-3804 · GHSA-2hx7-vxgc-r4p4

The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03…

LOW 27

The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via small files.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01949 Published 2007-07-16 No fix listed CWE-264

TI-2007-03689 CVE-2007-3805 · GHSA-5c2p-fpg9-rg5f

The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not…

LOW 26

The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates during IKE negotiation, which allows remote attackers to cause a denial of service (gateway stop) via cert…

CVSS 2.0MEDIUM 5.4 Network No auth Interaction — EPSS 0.00879 Published 2007-07-16 No fix listed CWE-310

Open these records in search →

Critical	1
High	1
Medium	4
Low	1
No CVSS	0