Check Point Next Generation vulnerabilities

2 CVEs affecting Check Point Next Generation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0469, published 2004-07-07.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0469, published 2004-07-07. High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days. Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56,…
• CVE-2002-0428, published 2002-08-12. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.