Kerio: >> Winroute Firewall >> 6.1.4_patch_2 Security Vulnerabilities
The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.
CVSS Score
2.1
EPSS Score
0.001
Published
2007-12-15
Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DNS responses.
CVSS Score
5.0
EPSS Score
0.018
Published
2006-10-20