CVE-2019-8454

🗓️ 29 Apr 2019 15:10:15Reported by checkpointType

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	Check Point Endpoint Security Access Control	4 Jul 201900:00	–	bdu_fstec
Cvelist	CVE-2019-8454	29 Apr 201915:10	–	cvelist
EUVD	EUVD-2019-17844	7 Oct 202500:30	–	euvd
NVD	CVE-2019-8454	29 Apr 201916:29	–	nvd
osv_cve	CVE-2019-8454	29 Apr 201916:29	–	osv_cve
Prion	Hardcoded credentials	29 Apr 201916:29	–	prion
Positive Technologies	PT-2019-2544	16 Apr 201900:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-8454: Windows Hard Link	29 Apr 201900:00	–	rapid7
RedhatCVE	CVE-2019-8454	22 May 202508:54	–	redhatcve

NVD

Node

AND

checkpoint endpoint_securityRange<e80.96

microsoft windowsMatch-

[
  {
    "product": "Check Point Endpoint Security client for Windows",
    "vendor": "Check Point",
    "versions": [
      {
        "status": "affected",
        "version": "before E80.96"
      }
    ]
  }
]

Source	Link
supportcenter	www.supportcenter.us.checkpoint.com/supportcenter/portal

17 Jun 2026 02:42Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.9

CVSS 3.17

EPSS0.00326