CVE-2008-0662: Check Point VPN-1 Secureclient

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials.

Affected products

• Check Point VPN-1 Secureclient: version ngai_r56 only; version ngx_r60 only

Published 2008-02-08. Last modified 2026-06-16.