<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: safe at office 500 utm</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-3465: Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password.</title><link>https://patchthecve.com/cve/CVE-2007-3465.html</link><guid>https://patchthecve.com/cve/CVE-2007-3465.html</guid><pubDate>Tue, 16 Jun 2026 22:42:05 +0000</pubDate><description>HIGH 10.0: Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password.</description></item><item><title>CVE-2007-3464: Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the o</title><link>https://patchthecve.com/cve/CVE-2007-3464.html</link><guid>https://patchthecve.com/cve/CVE-2007-3464.html</guid><pubDate>Tue, 16 Jun 2026 22:42:05 +0000</pubDate><description>HIGH 8.5: Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vect</description></item><item><title>CVE-2007-3462: Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before Embe</title><link>https://patchthecve.com/cve/CVE-2007-3462.html</link><guid>https://patchthecve.com/cve/CVE-2007-3462.html</guid><pubDate>Tue, 16 Jun 2026 22:42:05 +0000</pubDate><description>MEDIUM 6.0: Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network.</description></item></channel></rss>