Vulnerability · Published Jul 23, 2023 · Assigned by checkpoint
CVE-2023-28133
High 7.8
In plain English
A high-severity incorrect permission assignment in Harmony Endpoint.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.7% (higher than 93% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)5.7%top 7.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Harmony Endpoint. | E87.x before E81.31 |
Weakness: CWE-732