Vulnerability · Published May 12, 2022 · Assigned by checkpoint
CVE-2022-23742
High 7.8
In plain English
A high-severity security flaw in Check Point Endpoint Security Client for Windows. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.2% (higher than 91% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)4.2%top 9.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Check Point Endpoint Security Client for Windows | before E86.40 |
Weakness: CWE-65 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://supportcontent.checkpoint.com/solutions?id=sk178665%2C x_refsource_MISC
- https://supportcontent.checkpoint.com/solutions?id=sk179132 x_refsource_MISC