Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-6014

Опубликовано: 02 нояб. 2020
Источник: nvd
CVSS3: 6.5
CVSS2: 4.4
EPSS Низкий

Описание

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:checkpoint:endpoint_security:*:*:*:*:*:windows:*:*
Версия до e83.20 (исключая)

EPSS

Процентиль: 30%
0.00113
Низкий

6.5 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-114
CWE-426

Связанные уязвимости

github
больше 3 лет назад

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

EPSS

Процентиль: 30%
0.00113
Низкий

6.5 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-114
CWE-426