Checkpoint Smartconsole vulnerabilities

3 vulnerabilities

Known vulnerabilities in Checkpoint Smartconsole, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-6024checkpointsmartconsole
EPSS score
0.27%
Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users.7.2CVE-2024-24915checkpointcheck point smartconsole+1
EPSS score
0.21%
Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.7.8CVE-2024-24916checkpointcheck point smartconsole+1
EPSS score
2.74%
Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).