Check Point ZoneAlarm 安全漏洞

Check Point ZoneAlarm is a network firewall program from Check Point Israel. A security vulnerability exists in Check Point ZoneAlarm Extreme Security and Identity Agent for Windows that originates from a vulnerability that allows a local attacker to execute code in the context of the ZoneAlarm...

Check Point Response to CVE-2024-24910 - local privilege escalation in ZoneAlarm Extreme Security NextGen and Identity Agent

Symptoms - A vulnerability was discovered in ZoneAlarm Extreme Security that allows a local attacker to run code in the context of a ZoneAlarm process, using a specially crafted DLL. An attacker must first obtain the ability to execute local privileged code on the target system in order to exploi...

PT-2024-3070

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm Extreme Security NextGen affected versions not specified Check Point Identity Agent for Windows affected versions not specified Check Point Identity Agent for Windows Terminal Server affected versions not specified...

Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

CVE-2023-28134

Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-28134

Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

Design/Logic Flaw

Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-28134 Local Privliege Escalation in Check Point Endpoint Security Remediation Service

Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-28134 Local Privliege Escalation in Check Point Endpoint Security Remediation Service

Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2023-28134

The CVE-2023-28134 issue affects Check Point Harmony Endpoint / ZoneAlarm Extreme Security. A local attacker who can run low-privilege code can escalate to SYSTEM via the Remediation Service vulnerability. Public fixes are available: Check Point Endpoint Security E87.10 Windows clients and ZoneAl...

PT-2023-8555 · Check Point · Check Point Endpoint Security +2

Name of the Vulnerable Software and Affected Versions: Check Point Harmony Endpoint/ZoneAlarm Extreme Security versions affected versions not specified Description: The issue is related to improper permission assignment for a critical resource in Check Point Endpoint Security. It allows a local...

PT-2023-9283 · Check Point · Check Point Zonealarm Extreme Security

Name of the Vulnerable Software and Affected Versions: Check Point ZoneAlarm Extreme Security affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. The flaw exists within the Forensic Recorder service, where an attacker ca...

Check Point ZoneAlarm Extreme Security Elevation of Privilege Vulnerability

ZoneAlarm Extreme Security is a personal firewall software from Check Point Israel. An elevation of privilege vulnerability exists in versions prior to Check Point ZoneAlarm Extreme Security 15.8.211.19229, which stems from weak permissions on directories and a self-protecting driver bypass that...

CVE-2022-41604

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...

CVE-2022-41604

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...

Authentication flaw

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...

CVE-2022-41604

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...

CVE-2022-41604

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This...

CVE-2022-41604

CVE-2022-41604 affects Check Point ZoneAlarm Extreme Security prior to 15.8.211.19229. Root cause: weak permissions on %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates and a self-protection driver bypass that allows creation of a junction directory, enabling an arbitrary file move as NT AUTHORITY\...

PT-2022-25980 · Check Point · Zonealarm Extreme Security

Name of the Vulnerable Software and Affected Versions: Check Point ZoneAlarm Extreme Security versions prior to 15.8.211.19229 Description: The issue allows local users to escalate privileges due to weak permissions for the %PROGRAMDATA%CheckPointZoneAlarmDataUpdates directory and a self-protecti...