CVE-2019-8454: check point check point endpoint security client for windows Windows Hard Link
Vulnerability summary
CVE-2019-8454 is a high (CVSS 7.0) Windows Hard Link vulnerability in check point check point endpoint security client for windows. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 24.1% of scored vulnerabilities.
Timeline
- 29-04-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.33%
Chance of exploitation in the next 30 days
Percentile
24%
Versus all other CVEs
30-day change
0.00 pp
From 0.33% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-65Windows Hard LinkThe product, when opening a file or directory, does not sufficiently handle when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
- CWE-59Improper Link Resolution Before File Access ('Link Following')The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Affected systems
Check point1 product
Checkpoint1 product
- endpoint_security< e80.96
2 vendors · 2 products