CVE-2012-2753

Medium

Description

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.

SeverityMedium
CVSS6.9
Exploit probability—
ProductCheckpoint Endpoint Connect
PublishedJun 19, 2012
First seenJun 19, 2012

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
checkpoint endpoint_connectr73—
checkpoint endpoint_securitye80, e80.10, e80.20, e80.30, r73—
checkpoint endpoint_security_vpnr75—
checkpoint remote_access_clientse75, e75.10, e75.20—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.