CVE-2004-1658: Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Applicat...

Security readout for executives and security teams

CVE-2004-1658 describes a way for a local administrator to disable Kerio Personal Firewall 4.0's Application Security protection. The business risk is mainly for legacy endpoints that still depend on this firewall feature for process control. It is not evidence of remote compromise by itself. Exposure appears limited to systems running Kerio Personal Firewall 4.0 and relying on its Application Security feature. The source bundle does not identify broader products, supported versions, CPEs, or a confirmed fixed release. Low for most organizations because the product is old and the attacker must already have local administrator rights. Raise priority if legacy endpoints still use KPF4 as a meaningful control boundary. Mitigation focus: Identify and remove Kerio Personal Firewall 4.0 from managed endpoints.; Check vendor or archived advisory guidance for any fixed Kerio release.; Replace unsupported personal firewall software with a supported endpoint control..

Prepared

Jun 30, 2026, 00:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.