6.9

CVE-2012-2753

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkpoint ≫ Endpoint Connect Version r73
Checkpoint ≫ Endpoint Security Version e80 Update - Edition vpn_blade
Checkpoint ≫ Endpoint Security Version e80.10 Update - Edition vpn_blade
Checkpoint ≫ Endpoint Security Version e80.20 Update - Edition vpn_blade
Checkpoint ≫ Endpoint Security Version e80.30 Update - Edition vpn_blade
Checkpoint ≫ Endpoint Security Version r73
Checkpoint ≫ Remote Access Clients Version e75.10
Checkpoint ≫ Remote Access Clients Version e75.20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.315
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2012-06/0069.html
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk76480
Patch
Vendor Advisory