CVE-2008-1397 — Checkpoint Check Point Vpn-1 PRO vulnerability

CWE-2643 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
7.5%
top 8.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Checkpoint Check Point Vpn-1 PROCheckpoint Vpn-1Checkpoint Vpn-1 Firewall-1+2 more
Timeline
PublishedMar 20
Latest updateMay 1

Description

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's endpoint RFC1918 IP addresses, and then using SecuRemote to connect to a network interface at the other endpoint.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages5 packages

▶NVDcheckpoint/vpn-1_power_utmngx_r65_with_messaging_security
▶NVDcheckpoint/vpn-1ngx_r60
▶NVDcheckpoint/check_point_vpn-1_prongx_r61, ngx_r62_ga+1

Patches

Patch: supportcenter.checkpoint.com ↗Patch: supportcenter.checkpoint.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rwxm-mv8x-336c: Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-↗2022-05-01
▶
CVEList
CVE-2008-1397: Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-↗2008-03-20
▶
CVE-2008-1397 — Checkpoint vulnerability | cvebase