CVE-2001-1176: Check Point Firewall-1

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.

Affected products

• Check Point Firewall-1: version 4.1 only
• Check Point Provider-1: version 4.1 only
• Check Point VPN-1: version 4.1 only

Published 2001-07-12. Last modified 2026-06-16.