VulnerabilityModified
CVE-2005-1062
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
HIGH 7.5EPSS 2.56%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.56%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.56% probability · 84th percentile
- CISA KEV
- Not listed
- Affected
- kerio/kerio mailserver · kerio/personal firewall · kerio/winroute firewall
- Source
- cve@mitre.org
References
- http://research.tic.udc.es/scg/advisories/20050429-1.txt
- http://www.kerio.com/security_advisory.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/397221
- http://research.tic.udc.es/scg/advisories/20050429-1.txt
- http://www.kerio.com/security_advisory.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/397221
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.