VendorsKeriowinroute_firewall6.1
Vulnerabilities

Kerio Winroute Firewall 6.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2005-4425
Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service (crash) via certain RTSP streams.
Published 2005-12-20 · Modified
7.8EPSS 0.018
CVE-2005-4157
Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled.
Published 2005-12-11 · Modified
7.5EPSS 0.017
CVE-2006-2267
Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors in the "email protocol inspectors," possibly (1) SMTP and (2) POP3.
Published 2006-05-09 · Modified
5.0EPSS 0.032
CVE-2006-5420
Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DNS responses.
Published 2006-10-20 · Modified
5.0EPSS 0.026
CVE-2007-6385
The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.
Published 2007-12-15 · Modified
2.1EPSS 0.004