CVE-2002-0428: Check Point VPN

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.

Affected products

• Check Point Check Point VPN: version 1_4.1 only; version 1_4.1_sp1 only; version 1_4.1_sp2 only; version 1_4.1_sp3 only; version 1_4.1_sp4 only
• Check Point Firewall-1: version 4.0 only; version 4.1 only
• Check Point Next Generation: any version

Published 2002-08-12. Last modified 2026-06-16.