Ingate has acknowledged a vulnerability in Ingate Firewall and SIParator, which can be exploited by malicious people to spoof authenticated SNMPv3 packets.

For more information:
SA30574

Successful exploitation allows to read configuration and status information from the device, but requires that SNMP is enabled (not enabled by default).

NOTE: Reportedly, this can not be exploited to modify configuration settings on the device.

The vulnerability is reported in Ingate Firewall and SIParator version 3.1.0 and newer.

Solution
Restrict access to the SNMP agent.
Further details available to Secunia VIM customers

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers