CVE-2007-0471
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX...
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
Exploit likelihood
What each source reports
NVD Score used
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
- Record
CVE-2007-0471- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
- Record
CVE-2007-0471- Updated
- 2026-11-02
EUVDEUVD-2007-0469 No score
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
- Record
EUVD-2007-0469- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qvrr-43x4-6h4w No score
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX...
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
- Record
GHSA-qvrr-43x4-6h4w- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0471 is a high vulnerability (CVSS 7.5) in Checkpoint Connectra Ngx, published January 24, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.78%, the 86th percentile. No source names a fixed version.
References
securitytracker.com/id?1017559
lists.grok.org.uk/pipermail/full-disclosure/2007-January/051920.html
securityfocus.com/archive/1/457683/100/0/threaded
checkpoint.com/downloads/latest/hfa/connectra/security_r62.html
securityreason.com/securityalert/2179
Show 10 moreShow less
secunia.com/advisories/23847
exchange.xforce.ibmcloud.com/vulnerabilities/31646
secureknowledge.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?lid=sk32472
osvdb.org/31655
updates.checkpoint.com/fileserver/ID/7126/FILE/VPN-1_Hotfix1.pdf
vupen.com/english/advisories/2007/0276
nvd.nist.gov/vuln/detail/CVE-2007-0471
github.com/advisories/GHSA-qvrr-43x4-6h4w