Checkpoint Capsule Docs Standalone Client vulnerabilities

2 vulnerabilities

Known vulnerabilities in Checkpoint Capsule Docs Standalone Client, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2019-8459check pointcheck point endpoint security client for windows, vpn blade+6
EPSS score
1.19%
Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.7.8CVE-2019-8461checkpointcapsule_docs_standalone_client+2
EPSS score
1.12%
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with write permissions to the user.