CPE Details
Check Point Endpoint Security E84.10 for Windows
e84.10
2020-11-17
15h32 +00:00
15h32 +00:00
2020-11-17
15h32 +00:00
15h32 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:checkpoint:endpoint_security:e84.10:*:*:*:*:windows:*:*
Informations
Vendor
checkpointProduct
endpoint_securityVersion
e84.10Target Software
windowsRelated CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. | 7.8 |
Haute |
||
| Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privileges. | 7.8 |
Haute |
||
| Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted DLL in the repair folder which will run with the Endpoint client’s privileges. | 7.8 |
Haute |
||
| Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations. | 5.5 |
Moyen |
2025©
tesweb SA
