CVE-2013-5635 — Checkpoint Endpoint Security vulnerability

CWE-2553 documents3 sources
Severity
3.3LOWNVD
EPSS
0.0%
top 89.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Checkpoint Endpoint Security
Timeline
PublishedNov 30
Latest updateMay 17

Description

Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly maintain the state of password failures, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by entering password guesses within multiple Unlock.exe processes that are running simultaneously.

CVSS vector

AV:L/AC:M/C:P/I:P/A:NExploitability: 3.4 | Impact: 4.9

Affected Packages1 packages

Patches

Patch: supportcenter.checkpoint.com ↗Patch: supportcenter.checkpoint.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p35g-rx4g-5fh5: Media Encryption EPM Explorer in Check Point Endpoint Security through E80↗2022-05-17
▶
CVEList
CVE-2013-5635: Media Encryption EPM Explorer in Check Point Endpoint Security through E80↗2013-11-30
▶
CVE-2013-5635 — Checkpoint vulnerability | cvebase