CVE-2007-5699: Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers t...

Security readout for executives and security teams

This is a legacy remote code execution flaw in eIQNetworks Enterprise Security Analyzer 2.5. An attacker who can reach the ESA service on TCP 10616 may be able to take control by sending malformed SEARCHREPORT data. It is not listed in CISA KEV, but a public exploit reference exists, so exposed legacy systems deserve prompt attention. Exposure is likely limited to organizations still running eIQNetworks ESA 2.5 or inherited systems exposing TCP 10616. Confirm whether ESA is present, because the bundled affected-product metadata is incomplete and lists placeholders. Prioritize if ESA 2.5 is present or TCP 10616 is reachable from untrusted networks. If the product is absent, record non-exposure and move on. If present, treat as a legacy remote code execution risk with public exploit references. Mitigation focus: Identify and isolate any eIQNetworks ESA 2.5 systems.; Restrict TCP 10616 to trusted management networks only.; Check vendor or archival guidance for patched or supported versions..

Prepared

Jun 29, 2026, 01:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.