CVE-2004-0469: Check Point Firewall-1

High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days.

Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.

Affected products

• Check Point Firewall-1: any version; version 2.0 only; version 2.0.1 only
• Check Point Next Generation: any version
• Check Point NG-Ai: version r54 only; version r55 only
• Check Point VPN-1: version vsx_2.0.1 only; version vsx_ng_with_application_intelligence only

Published 2004-07-07. Last modified 2026-06-16.