Check Point vulnerabilities
6 vulnerabilities
Known vulnerabilities in Check Point products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.
Products
10- Check Point Endpoint Security Client For Windows2 vulnerabilities
- Check Point Endpoint Security Client For Windows, Anti Malware Blade1 vulnerabilities
- Check Point Endpoint Security Client For Windows, VPN Blade1 vulnerabilities
- Check Point Ipsec VPN1 vulnerabilities
- Zonealarm Extreme Security1 vulnerabilities
- Multiple Products0 vulnerabilities
- Quantum Security Gateway, Quantum Security Management0 vulnerabilities
- Quantum Security Gateways0 vulnerabilities
- Security Gateway0 vulnerabilities
- SmartConsole0 vulnerabilities
CVE-2024-6233check pointzonealarm extreme security+1
EPSS score0.40%
Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the Forensic Recorder service. By creating a symbolic link, an attacker can abuse the service to overwrite arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21677.CVE-2019-8463check pointcheck point endpoint security client for windows+1EPSS score1.21%
A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to be written to non-standard locations.CVE-2019-8456check pointcheck point ipsec vpn+1EPSS score20.39%
Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server.CVE-2019-8454check pointcheck point endpoint security client for windows+1EPSS score0.33%
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.CVE-2019-8459check pointcheck point endpoint security client for windows, vpn blade+6EPSS score1.19%
Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.CVE-2019-8458check pointcheck point endpoint security client for windows, anti-malware blade+3EPSS score0.95%
Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.