Description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected products
- checkpoint / Check Point Quantum Gateway, Spark Gateway and CloudGuard NetworkCheck Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. – Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20.
- checkpoint / cloudguard_network_securityr81.10 – r81.10
- checkpoint / cloudguard_network_securityr80.40 – r80.40
- checkpoint / cloudguard_network_securityr81 – r81
- checkpoint / cloudguard_network_securityr81.20 – r81.20
- checkpoint / quantum_security_gateway_firmwarer81 – r81
- checkpoint / quantum_security_gateway_firmwarer81.20 – r81.20
- checkpoint / quantum_security_gateway_firmwarer81.10 – r81.10
- checkpoint / quantum_security_gateway_firmwarer80.40 – r80.40
- checkpoint / quantum_spark_firmwarer81.10 – r81.10
- checkpoint / quantum_spark_firmwarer80.40 – r80.40
- checkpoint / quantum_spark_firmwarer80.20 – r80.20
- checkpoint / quantum_spark_firmwarer81 – r81
Exploits & proofs of concept
- nucleiCheck Point Quantum Gateway - Information Disclosureby johnk3r,s4e-io
References
Updated 44m ago · 8 sources