CVE-2020-6024

CVE-2020-6024 affects Check Point SmartConsole prior to R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548. The issue is a local privilege escalation caused by executing binaries from a directory writable by all authenticated users. Publi...

CVE-2024-24916

CVE-2024-24916 concerns DLL hijacking in the installer for Check Point SmartConsole. The vulnerability stems from untrusted DLLs in the installer’s directory that can be loaded via the Windows DLL search order, potentially allowing arbitrary code execution with installer privileges (admin). Affec...

CVE-2024-24915

CVE-2024-24915 affects Check Point SmartConsole. Credentials are not cleared from memory after use, enabling an administrator to perform a memory dump of the SmartConsole process and fetch sensitive data. Exploitation context: an Administrator with local access can access credentials via a memory...