Check Point SSL Network Extender vulnerabilities

2 CVEs affecting Check Point SSL Network Extender, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23746, published 2022-11-30.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-30357, published 2021-06-08. Medium severity, CVSS 5.3. EPSS: 22.8% chance of exploitation in the next 30 days. SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have…
• CVE-2022-23746, published 2022-11-30. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a…