CVE-2019-8459: check point check point endpoint security client for windows, vpn blade Unquoted Search Path or Element
Vulnerability summary
CVE-2019-8459 is a critical (CVSS 9.8) Unquoted Search Path or Element vulnerability in check point check point endpoint security client for windows, vpn blade. EPSS estimates a 1.19% chance of exploitation in the next 30 days, higher than 67.4% of scored vulnerabilities.
Timeline
- 20-06-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.19%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
0.00 pp
From 1.19% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Checkpoint6 products
- capsule_docs_standalone_client< e80.82
- endpoint_security_clients< e80.83
- endpoint_security_server_package< r77.30.03
- jumbo_hotfix_for_endpoint_security_server< r77.30
- remote_access_clients< e80.83
Check point1 product
2 vendors · 7 products