Vulnerability · Published Jan 20, 2021 · Assigned by checkpoint
CVE-2020-6024
High 7.8
In plain English
A high-severity security flaw in Check Point SmartConsole. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 81.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Check Point SmartConsole | R80.20, R80.30, R80.40, R81 |
Weakness: CWE-114
References
- https://supportcontent.checkpoint.com/solutions?id=sk142952 x_refsource_MISC