211 matches found
VPN SNX portal may be vulnerable to brute-force attack on passwords
Cause The VPN SNX portal in the IPsec VPN Software Blade does not implement any protection against brute-force attack on usernames/passwords. Symptoms - The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender SNX. If the portal is configured for...
Check Point response to CVE-2015-3456 (VENOM)
Symptoms - A vulnerability in the virtual floppy drive code was discovered CVE-2015-3456. Solution The relevant fix for Threat Emulation gateway is already available and has been integrated in Threat Emulation engine version 24.990000010 refer to sk95235. Any Threat Emulation engine version that ...
Check Point response to GnuTLS certificate verification vulnerability (CVE-2014-0092)
...
Check Point response to OpenSSL vulnerability CVE-2006-3738
...
CVE-2026-48136 - Authenticated Administrator Role-Based Access Control Bypass in Compliance
Symptoms - When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access...
Check Point's response to Oracle Java Floating-Point Value Denial of Service Vulnerability (CVE-2010-4476)
Symptoms Oracle Java Runtime Environment is prone to a remote denial-of-service vulnerability. Successful attacks will cause applications written in Java to hang, creating a denial-of-service condition. For more details please refer to Oracle Security Alert for CVE-2010-4476. All versions of...
Check Point response to DNS poisoning vulnerability CVE-2008-1447
...
Check Point response to NET-SNMP vulnerability CVE-2007-5846
...
Check Point Response to CVE-2024-24916 - DLL HiJacking
Cause The installer relies on the default Windows DLL search order, which includes the current working directory. If required DLLs are missing or not explicitly loaded from a secure path, this can lead to DLL hijacking. Symptoms - Untrusted DLLs in the installer's directory may be loaded and...
Check Point Response to CVE-2024-24910 - local privilege escalation in ZoneAlarm Extreme Security NextGen and Identity Agent
Symptoms - A vulnerability was discovered in ZoneAlarm Extreme Security that allows a local attacker to run code in the context of a ZoneAlarm process, using a specially crafted DLL. An attacker must first obtain the ability to execute local privileged code on the target system in order to exploi...
Check Point response to Linux kernel 2.6 with IPv6 support DoS vulnerability (CVE-2010-1188)
...
CVE-2026-62144 - Management Authentication Bypass and Privilege Escalation
Symptoms - Impact: An unauthenticated attacker can run any command on the Management including run-script and exec-command on Security Gateway Check Point Firewall. Affected Products and versions: Products: Security Management, Multi-Domain Security Management Server MDS Product Versions: R77.30,...
Check Point response to SecuRemote Topology Service Hostname Disclosure
...
Check Point response to NET-SNMP vulnerability CVE-2008-0960
...
CA Products Anti-Virus Engine CAB File Handling Vulnerabilities (CVE-2007-2863, CVE-2007-2864)
...
OpenSSL CVE-2006-4339 8732 vulnerability Fix
...
Predictable TCP sequences generated by Security Gateway in R80.20 / R80.30
...
Machine is vulnerable to attacks after CPUSE clean install and before completing the First Time Wizard
...
Check Point response to "libcrypt 'crypt()' Password Encryption Weakness" (CVE-2012-2143)
...
Check Point response to CVE-2009-1385
...
Check Point response to ISC DHCP dhclient buffer overflow vulnerability (CVE-2009-0692)
...
Check Point response to Integer Overflow Vulnerability in GNU C Library (CVE-2007-3508)
...
CVE-2026-18574 - Management Authentication Bypass
Symptoms - Impact: An unauthenticated attacker may be able to bypass Management authentication and execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. This issue was discovered internally, and Che...
Check Point Response to CVE-2024-0105 and CVE-2024-0106 - NVIDIA Firmware Vulnerabilities
Cause NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. Symptoms - These Check Point Line Cards and appliances contain network interfaces with potentially vulnerable NVIDIA firmware versions see CVE-2024-0105 and...
Check Point Response to CVE-2021-3156 - sudo Privilege Escalation
Symptoms - CVE-2021-3156 states: "Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character." - For more information, refer to https://www.sudo.ws/stable.html1.9.5p2 Solutio...
Check Point CloudGuard Controller fails to connect to a VMware vCenter Data Center in R80.20.M2
...
Rare failure in the Identity Sharing network registration may potentially result in incorrect policy actions
Cause The connection is handled by the PEP Gateway, but no identity is found on the PEP for the connections IPs. With smart pull Identity sharing, the PEP Gateway will hold the connection if: 1. The Access Role is used in the policy and required for the final rulebase match. 2. There is a remote...
Anti-Spoofing might be enforced incorrectly in specific scenarios on R75.47 Security Gateway
...
Check Point's Response to Stonesoft's "Advanced Evasion Techniques" (CVE-2010-0102)
...
Check Point response to ISC BIND 9 DoS vulnerability (CVE-2009-0696)
...
Check Point Response to CVE-2021-30356 - denial-of-service vulnerability in Identity Agent
Cause A denial-of-service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files. This issue was published as CVE-2021-30356. The write-up for the vulnerability is available at:...
Check Point Response to SNIcat
...
HTTPS Inspection update for attending India CCA unauthorized digital certificates
...
Check Point response to vulnerability in ISC BIND (CVE-2009-4022) on UTM-1 Edge
...
Check Point response to OpenSSL vulnerability CVE-2007-3108
...
Detection issue of malicious URLs in Anti-Bot / Anti-Virus after installing Take 143 of R77.30 Jumbo Hotfix Accumulator
...
Important security and stability enhancements for Security Gateway
...
SIP/MGCP packets that should be encrypted are sent in clear text when SecureXL is enabled on R75.40VS
...
Anti-Virus / Anti-Bot / Application Control / URL Filtering update might fail on R75.40 / R75.40VS / R75.45 / R75.46 / E80.41
...
Using Domain Objects in the rulebase might cause wrong policy actions in R80.10 JHF Take_91-103
...
Check Point response to TLS 1.x padding vulnerability
...
Some protections may not work for specific HTTP evasions in R77.10 / R77 / R76
...
E-mails might not be scanned by the Threat Emulation blade in some specific scenarios depending on the e-mail client behavior
...
Check Point's response to PHP Floating-Point Value Denial of Service Vulnerability (CVE-2010-4645)
...
Check Point response to OpenSSL vulnerability CVE-2007-5135
...
User Authority Denial of Service vulnerability
...
In a rare scenario, R80.30 Security Gateway managed by R80.30 Security Management crashes when Threat Prevention Forensics feature is enabled
...
RADIUS/TACACS+ users fail to change the default admin password when running the First Time Wizard
...