CVE-2023-28133

CVE-2023-28133 relates to a local privilege escalation in Check Point Endpoint Security Client (E87.30). The root cause is a flaw involving a crafted OpenSSL configuration file that allows a low-privilege user (Users group) to elevate privileges via affected components (e.g., TracSrvWrapper.exe, ...

CVE-2023-28133: Incorrect Permission Assignment for Critical Resource

Local privilege escalation in Check Point Endpoint Security Client version E87.30 via crafted OpenSSL configuration file...

CVE-2022-23742: Windows Hard Link

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links...

PT-2022-7274

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions earlier than E86.40 Description The issue is related to incorrect handling of symbolic links before accessing a file, which can allow an attacker to replace arbitrary files in the syste...

Check Point Response to CVE-2022-23742 - local privileges escalation in Endpoint Security Client's EFRService

Symptoms - The EFRService, which collects forensics data for various blades for the Check Point Endpoint Security Client for Windows, copies files for forensics reports from a directory with insufficient privileges. A local attacker can replace those files with malicious or linked content, which...

PT-2020-18896

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions prior to E84.20 Description The issue allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair,...

CVE-2020-6021: Uncontrolled Search Path Element

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted...

PT-2020-18889

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions prior to E83.20 Description The issue arises when the Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, attempts to load a non-existe...

CVE-2020-6014: Process Control

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point...

PT-2019-19054

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions prior to E82.10 Description A denial of service issue was reported, allowing a service log file to be written to non-standard locations. Recommendations For versions prior to E82.10,...

CVE-2019-8463: Improper Link Resolution Before File Access

A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to be written to non-standard locations...

PT-2019-19053

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions prior to E80.83 Description The issue arises when a process is started without using quotes in the path, potentially leading to the loading of a previously placed executable with a...

PT-2019-19052

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions prior to E81.00 Description The issue occurs when the Check Point Endpoint Security Client for Windows, with the Anti-Malware blade installed, attempts to load a non-existent DLL during...

CVE-2019-8459: Unquoted Search Path or Element

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one...

CVE-2019-8458: Process Control

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software...

CVE-2019-8454

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the syste...

CVE-2019-8454: Windows Hard Link

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the syste...

PT-2019-4139

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm versions up to 15.4.062 Check Point Endpoint Security client for Windows versions prior to E80.96 Description The issue is related to errors in permission handling, allowing a local attacker to gain higher privileges to...

CVE-2019-8452: Windows Hard Link

A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gain...

PT-2019-2544

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security client for Windows versions prior to E80.96 Description The issue is related to insufficient access control in the Check Point Endpoint Security client, which can be exploited by a local attacker. This can be done...