Check Point has addressed two significant vulnerabilities in its firewall and management products, which could enable an unauthenticated remote attacker to execute code under certain circumstances, but the company has not provided details on these specific conditions This article explores firewall check point. . The two records share the same affected list: R82.10 with Jumbo Hotfixes 43 or lower, R82 with Jumbo Hotfixes 125 or lower, and R81.20 with Jumbo Hotfixes 165 or lower.
The Canadian Center for Cyber Security released an advisory that expands the list of products covered, including Security Gateway, Security Management Server, and Spark Firewall, which is part of Check Point's small-business offerings.
The staff member responded that the issue pertains to certificate processing, which could theoretically occur in an environment without a VPN but with VPN certificates present. A Check Point employee mentioned that it can be installed on top of any Jumbo Hotfix level in R81.20, R82.00, and R82.10, and specifically mentioned those three versions. In June and July, Check Point addressed critical vulnerabilities in its products, including a Remote Access VPN and Mobile Access certificate validation authentication bypass flaw.
The U.S. Neither Check Point's notice nor any public records reviewed for this article specifies which Spark or Security Management versions are affected, the builds containing the fix, or the specific conditions required for the fix to be effective.
