CVE-2019-8456

Summary of CVE-2019-8456 (Check Point): A vulnerability in Check Point’s IKEv2 IPsec VPN up to R80.30 could allow an attacker with knowledge of internal configuration to connect to a site-to-site VPN server via the IKEv2 tunnel. The issue is specific to IKEv2 on Security Gateways (R77.x not affec...

Check Point Response to CVE-2019-8456 - unauthorized VPN access to internal networks via IKEv2 tunnel

Symptoms - In some less common conditions, Check Point IKEv2 IPsec VPN up to R80.30 may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server. Solution Important Notes: R77.x versions are not affected because they use a...