Check Point VPN-1 Firewall-1 vulnerabilities

2 CVEs affecting Check Point VPN-1 Firewall-1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1397, published 2008-03-20.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-1623, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 48.6% chance of exploitation in the next 30 days. The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may…
• CVE-2008-1397, published 2008-03-20. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept…