CVE-2005-3673: checkpoint express
Vulnerability summary
CVE-2005-3673 is a high (CVSS 7.8) vulnerability in checkpoint express. EPSS estimates a 4.88% chance of exploitation in the next 30 days, higher than 91.9% of scored vulnerabilities.
Timeline
- 18-11-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.88%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.88% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Checkpoint4 products
- expressci_r57
- firewall-13.0
- vpn-1ngx_r60
- vpn-1_firewall-1_next_generationr54 | r55 | r55p | r55w
1 vendor · 4 products
References
9 links- jvn.jp/niscc/NISCC-273756/index.htmlX Refsource MISC
- www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/X Refsource MISC