Lucene search

K
cve[email protected]CVE-2014-8951
HistoryNov 16, 2014 - 5:59 p.m.

CVE-2014-8951

2014-11-1617:59:07
web.nvd.nist.gov
23
check point
security gateway
r75
r76
r77
r77.10
usercheck
application control
url filtering
dlp
threat emulation
anti-bot
anti-virus
vulnerability
denial of service
fwk0 process crash

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.9 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%

Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) Anti-Bot, or (6) Anti-Virus blade is used, allows remote attackers to cause a denial of service (fwk0 process crash, core dump, and restart) via a redirect to the UserCheck page.

Affected configurations

NVD
Node
checkpointsecurity_gatewayMatchr75
OR
checkpointsecurity_gatewayMatchr76
OR
checkpointsecurity_gatewayMatchr77
OR
checkpointsecurity_gatewayMatchr77.10

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.9 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.3%

Related for CVE-2014-8951