Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office with firmware before Embedded NGX 7.0.45 GA allows remote attackers to execute commands as arbitrary users and disable firewalling of the protected network.