CVE-2019-8458
Medium
Description
Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.
SeverityMedium
CVSS4.4
Exploit probability—
ProductCheckpoint Endpoint Security Clients
PublishedJun 20, 2019
First seenJun 20, 2019
Weakness typeCWE-114CWE-114
How to fix
Update
- checkpoint endpoint_security_clientse81.00 or later
- checkpoint remote_access_clientse81.00 or later
- checkpoint capsule_docse81.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint endpoint_security_clients | v < e81.00 | e81.00 |
| checkpoint remote_access_clients | v < e81.00 | e81.00 |
| checkpoint capsule_docs | v < e81.00 | e81.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.