Vulnerability · Published May 11, 2022 · Assigned by checkpoint
CVE-2021-30361
Medium 6.7
In plain English
A medium-severity OS command injection in Check Point Gaia Portal. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.5% (higher than 91% of all known vulnerabilities).
Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)4.5%top 8.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Check Point Gaia Portal | before Jumbo HFAs released 13-Apr-2022 |
Weakness: CWE-78
References
- https://supportcontent.checkpoint.com/solutions?id=sk179128 x_refsource_MISC