CVE-2004-2679: Check Point Firewall-1

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information.

Affected products

• Check Point Firewall-1: version 4.0 only; version 4.1 only; version r55 only

Published 2004-12-31. Last modified 2026-06-16.