211 matches found
Check Point Response to CVE-2014-6271 and CVE-2014-7169 Bash Code Injection vulnerability
...
Check Point response to CVE-2012-4929, CVE-2012-4930 aka CRIME attack
...
CVE-2022-23745 - Memory corruption issue in Capsule Workspace on Android mobile devices
Symptoms A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information. This issue was discovered and responsibly disclosed by Gabe Flawedworld and received ...
CVE-2026-62145 - Local privilege escalation in Gaia Portal
Symptoms - A vulnerability in Gaia Portal allows an authenticated attacker with read-only access to run commands as root. Affected Products and Versions: Versions: R77.30, R80, R80.10, R80.20, R80.30, R81 R81.10, R81.20, R82, R82.10 Products: Security Gateway, Security Management Note: Check Poin...
Blocking NTP access on Gaia OS / IPSO OS (CVE-2013-5211)
...
Check Point Response to CVE-2024-3596 - Blast-RADIUS attack
Cause The Blast-RADIUS attack allows a man-in-the-middle attacker between the RADIUS client and server to forge a valid protocol accept message in response to a failed authentication request. This forgery could give the attacker access to network devices and services without the attacker guessing...
Check Point Response to CVE-2024-24912 - local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file
Symptoms - A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and lower. By manipulating the COM object, an attacker could load a specially crafted DLL. An attacker must first obtain the ability to execute local privilege...
Check Point response to CVE-2009-1227 (Bugtraq ID: 34286)
...
UTM-1 Edge W Embedded NGX 7.0.48x reflected XSS vulnerability (low severity) (CVE-2008-1208)
...
Check Point response to Apache HTTP CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884
Symptoms - These issues were reported in the Apache HTTP Server version 2.4.60 and lower: 1. CVE-2024-38473 - Apache HTTP Server: proxy encoding problem 2. CVE-2024-38474 - Apache HTTP Server: weakness with encoded question marks in backreferences 3. CVE-2024-38475 - Apache HTTP Server: weakness...
Check Point response to Apple CVE-2014-1266
...
Check Point Response to CVE-2015-0204 - TLS FREAK Attack
Symptoms - On Tuesday, March 3, 2015, researchers disclosed a new SSL/TLS vulnerability - the FREAK attack. The vulnerability allows attackers to intercept HTTPS connections between vulnerable clients and vulnerable servers and force them to use the "export-grade" cryptography, which can then be...
SSL/TLS MITM vulnerability (CVE-2014-0224)
...
Check Point response to OpenSSL ASN1 BIO vulnerability (CVE-2012-2110, CVE-2012-2131)
...
CVE-2024-52887 - Self-XSS vulnerability in Mobile Access Native Applications 'favorites' dialog
Symptoms - The Mobile Access portal is vulnerable to a stored, self-XSS attack. An authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list. So far today, no attack with actual impact is known. - This issue...
Check Point Response to CVE-2024-6387 - OpenSSH Library RCE
Cause A security regression CVE-2006-5051 was discovered in the OpenSSH server sshd version 8.5p1. There is a race condition, which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time...
Check Point Response to CVE-2020-10713 - GRUB2 bootloader is vulnerable to buffer overflow
Symptoms - CVE-2020-10713 states: "The GRUB2 boot loader is vulnerable to buffer overflow, which results in arbitrary code execution during the boot process, even when Secure Boot is enabled." For more information, refer to https://www.kb.cert.org/vuls/id/174059. Solution Gaia OS versions R81.10...
Check Point Response to CVE-2016-0777 and CVE-2016-0778 - OpenSSH Client vulnerabilities
Symptoms - Qualys Security team discovered two vulnerabilities in the roaming code of the OpenSSH client CVE-2016-0777 and CVE-2016-0778: SSH roaming enables a client, in case an SSH connection breaks unexpectedly, to resume it at a later time, provided the SSH server also supports it. Solution T...
Check Point response to CVE-2011-3389 aka BEAST attack
...
Local Privilege Escalation in Check Point Endpoint Security Remediation Service
Symptoms - This vulnerability allows local attackers to escalate privileges on affected installations of Check Point Harmony Endpoint / ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
Check Point Response to CVE-2022-23744 - Use of unprotected registry change to disable Endpoint protection
Symptoms - Check Point Endpoint Security Client before version E86.50 fails to protect against specific registry change, allowing a local administrator to disable endpoint protection. This issue was discovered and responsibly disclosed by Erwin Chan and received ID CVE-2022-23744. Solution This...
Check Point Response to Intel Microarchitectural Data Sampling Vulnerabilities (Fallout, RIDL, Zombieload) (CVE-2018-12126 , CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)
Symptoms - Researchers have released information about several vulnerabilities in Intel processors: Under certain conditions, data in microarchitectural structures that the currently-running software does not have permission to access may be speculatively accessed by faulting or assisting load or...
Check Point Response to CVE-2022-23742 - local privileges escalation in Endpoint Security Client's EFRService
Symptoms - The EFRService, which collects forensics data for various blades for the Check Point Endpoint Security Client for Windows, copies files for forensics reports from a directory with insufficient privileges. A local attacker can replace those files with malicious or linked content, which...
Check Point Response to CVE-2020-8597 - PPP buffer overflow vulnerability
Cause The bounds check for the rhostname was improperly constructed in the EAP request and response functions, which could allow a buffer overflow to occur. Configuring to connect to a malicious server can expose the system to this vulnerability. Symptoms - A buffer overflow flaw was found in the...
Check Point response to TCP reassembly vulnerability (CVE-2014-3000; FreeBSD-SA-14:08.tcp)
...
OpenSSLVulnerability CVE-2007-5135 on IPSO 4.2
...
Check Point Response to CVE-2024-24914 - TCL substitution of global parameter values
Symptoms - After logging in to Gaia Portal, authenticated users local Gaia users and RADIUS / TACACS users may cause code injection in Gaia Portal because of unprotected global variables usage when processing the HTTP request in the TCL process. This issue received the ID CVE-2024-24914. Solution...
Check Point Response to CVE-2021-3449 - OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message
Symptoms - OpenSSL published CVE-2021-3449 for versions OpenSSL 1.1.1. - This issue can cause a corresponding process to stop working in Gaia OS. Solution Check Point versions R80.30 and lower are not vulnerable! Check Point is vulnerable to OpenSSL CVE-2021-3449 only in these cases: Quantum...
Check Point Response to CVE-2019-8461 - Endpoint Security Initial Client
...
Check Point response to NTP "panic threshold" Bypass Vulnerability (CVE-2015-5300)
...
Check Point response to "DoS through hash table against Web Application Platforms" (CVE-2011-4838)
...
Check Point Response to CVE-2025-9142 - Harmony SASE Windows Client Vulnerability
Cause The authentication and file-handling logic does not enforce strict trust boundaries. Under specific conditions, the system fails to validate data during certificate processing before using it in a privileged service component. Symptoms - A local attacker can trigger Harmony SASE Windows...
Preventative Hotfix for CVE-2024-24919 - Quantum Gateway Information Disclosure
Solution This article refers to Quantum Security Gateways running Gaia OS and CloudGuard Network Security. For Quantum Spark Gateways that run a Gaia Embedded OS, see sk182357. Following our security update on May 27, 2024, Check Point's dedicated task force continues investigating attempts to ga...
Check Point response to Apache CVEs - November 2021 for httpd versions between 2.4.41 and 2.4.51
Solution In November 2021, Apache open source published CVEs for httpd versions between 2.4.41 and 2.4.51 see the list of the CVEs in the "Cause" section. Check Point uses the Apache HTTP Server as the Web server for several of its user portals on both the Security Gateway Gaia Portal, Identity...
Check Point response to the POODLE Bites vulnerability (CVE-2014-3566)
...
Check Point response to OpenSSL CVE-2012-0884
...
OpenSSL Vulnerability CVE-2007-4995
...
CVE-2024-52888 - Mobile Access File Share applications are vulnerable to stored XSS attacks
Symptoms - When an authenticated Mobile Access portal end-user browses to a File Share application, the portal may run a script while attempting to display a directory or some file's properties. Additionally, an authenticated attacker may store specially crafted file/dir names for other...
Check Point response to SegmentSmack (CVE-2018-5390) and FragmentSmack (CVE-2018-5391)
...
Check Point response to Phrack article "Exploiting TCP Persist Timer Infiniteness" (CVE-2009-1926, VU#723308)
...
Check Point response to Sockstress TCP DoS attacks (CVE-2008-4609)
...
Check Point response to Linux NULL pointer dereference vulnerability (CVE-2009-2692)
...
Check Point response to "VPN-1 PAT information disclosure" vulnerability (CVE-2008-5849)
...
CVE-2024-24915 - Potential vulnerability in SmartConsole where an administrator's credentials may be exposed to users with debugging privileges on the administrator's computer
Symptoms - Credentials are not cleared from memory after being used. A user with Administrator permissions can execute a memory dump for the SmartConsole process and fetch them. - This issue received the ID CVE-2024-24915. Solution This problem was fixed. The fix is included starting from: R82...
Check Point Response to CVE-2019-14899 (Inferring and hijacking VPN-tunneled TCP connections)
...
Check Point Response to CVE-2016-0728 kernel: Possible use-after-free vulnerability in keyring facility
...
SecurePlatform Local Privilege Escalation Report
...
Check Point Response to CVE-2024-24911 - Out of Bounds read in the CPCA process on a Check Point Management Server
Cause An Out-of-Bounds read may occur when processing certain HTTP "POST" requests to the Security Management Server / Domain Management Server to the TCP port 18264. Repeated requests can cause a denial-of-service DoS of the cpca process and may lead it to exit unexpectedly with a core dump file...
Check Point Response to Docker Desktop Vulnerabilities
Solution This article provides Check Point response to Docker Desktop vulnerabilities that various vulnerability scanners may show when testing a Check Point Security Gateway / Management Server / Log Server. To exploit a Docker Desktop vulnerability, a malicious actor must have a local access on...
Check Point Response to CVE-2023-28133 - Local privilege escalation in Check Point Endpoint Security Client via crafted OpenSSL configuration file
Symptoms - Local privilege escalation in Check Point Endpoint Security Client. Affected versions: E87.30 and lower, including all E86.x clients. Affected clients: Standalone Remote Access VPN clients, Endpoint Security Clients with Remote Access VPN enabled. Affected processes: TracSrvWrapper.exe...