Threat Investigation
Request a demo

CVE-2022-23743

High

Description

Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory allow a local attacker the ability to execute an arbitrary file write, leading to execution of code as local system, in ZoneAlarm versions before v15.8.211.192119

SeverityHigh
CVSS7.8
Exploit probability—
ProductCheckpoint Zonealarm
PublishedMay 11, 2022
First seenMay 11, 2022
Weakness typeCWE-269Improper privilege management

How to fix

Update
  • checkpoint zonealarm15.8.211.192119 or later

Affected products

ProductAffected versionsFixed in
checkpoint zonealarmv < 15.8.211.19211915.8.211.192119

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.