CVE-2007-3462: Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before E...

Security readout for executives and security teams

This flaw affects legacy Check Point SofaWare Safe@Office devices running firmware before Embedded NGX 7.0.45 GA. A malicious web page could cause a logged-in user’s browser to send unauthorized management actions, potentially including disabling firewall protection. Business risk depends on whether these devices still exist and whether their management interface is reachable. Exposure is most likely in legacy environments still running Check Point SofaWare Safe@Office appliances below Embedded NGX 7.0.45 GA, especially where administrators access the management UI from browsers that can reach untrusted content. Treat as high priority only if Safe@Office appliances remain deployed. The impact could undermine firewall protection, but the product is legacy and the provided sources do not show active exploitation. Mitigation focus: Upgrade Safe@Office firmware to Embedded NGX 7.0.45 GA or later where available.; Check Check Point or SofaWare guidance for supported firmware and replacement options.; Restrict management access to trusted administrative networks only..

Prepared

Jun 29, 2026, 04:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.