| Package | Affected versions | Patched versions |
|---|---|---|
| kerio mailserver | = 6.0.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8 | |
| personal firewall | = 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.16= 4.0.7= 4.0.8= 4.0.9= 4.1.0= 4.1.1= 4.1.2 | |
| winroute firewall | = 6.0.0= 6.0.1= 6.0.10= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9 |
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free