CVE-2020-6014

2020-10-3014:22:05

CWE-114

checkpoint

www.cve.org

check point

endpoint security

dll loading

EPSS

Percentile

12.6%

JSON

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

CNA Affected

[
  {
    "product": "Check Point Endpoint Security Client for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before E83.20"
      }
    ]
  }
]

References

supportcontent.checkpoint.com/solutions?id=sk168081

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-6014