Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier…
Priority LOW 22Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Comodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local users to bypass driver protections on the HKLM\SYSTEM\Software\Comodo\Personal Firewall registry key by guessing the name of a named pipe under \Device\NamedPipe\OLE and attempting to open it multiple times.
Why it matters now
EPSS 0.00714 53rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:comodo:comodo_firewall_pro:2.4.16.174:*:*:*:*:*:*:* | 2.4.16.174 | Vulnerable | Comodo |
| cpe:2.3:a:comodo:comodo_firewall_pro:2.4.17.183:*:*:*:*:*:*:* | 2.4.17.183 | Vulnerable | Comodo |
| cpe:2.3:a:comodo:comodo_firewall_pro:2.4.18.184:*:*:*:*:*:*:* | 2.4.18.184 | Vulnerable | Comodo |
- cpe:2.3:a:comodo:comodo_firewall_pro:2.4.16.174:*:*:*:*:*:*:* Versions 2.4.16.174 Vulnerable ·Comodo
- cpe:2.3:a:comodo:comodo_firewall_pro:2.4.17.183:*:*:*:*:*:*:* Versions 2.4.17.183 Vulnerable ·Comodo
- cpe:2.3:a:comodo:comodo_firewall_pro:2.4.18.184:*:*:*:*:*:*:* Versions 2.4.18.184 Vulnerable ·Comodo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-1330
- 2026-10-03 Alias added: GHSA-4gf9-6xwj-3w66
References
More Comodo Firewall Pro vulnerabilities
- TI-2007-00691 cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174… CVSS 2.0HIGH 7.2
- TI-2007-02641 Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of… CVSS 2.0HIGH 7.2
- TI-2007-02640 Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older… CVSS 2.0HIGH 7.2
- TI-2007-00692 cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and… CVSS 2.0HIGH 7.2
- TI-2007-01019 Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a… CVSS 2.0MEDIUM 4.6
Sources
- CVE-2007-1330 · CVE Program
- CVE-2007-1330 · NVD
- FIRST EPSS
- GHSA-4gf9-6xwj-3w66 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences