CVE-2020-6014
Medium
Description
Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.
SeverityMedium
CVSS6.5
Exploit probability—
ProductCheckpoint Endpoint Security
PublishedNov 2, 2020
First seenNov 2, 2020
Weakness typeCWE-114CWE-114
How to fix
Update
- checkpoint endpoint_securitye83.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint endpoint_security | v < e83.20 | e83.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.