Check Point Remote Access Clients vulnerabilities

4 CVEs affecting Check Point Remote Access Clients, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-8461, published 2019-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-8459, published 2019-06-20. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed…
CVE-2019-8461, published 2019-08-29. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can…
CVE-2019-8458, published 2019-06-20. Medium severity, CVSS 4.4. EPSS: 1% chance of exploitation in the next 30 days. Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with…
CVE-2012-2753, published 2012-06-19. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint…