CVE-2019-8456: Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to…

PriorityP342medium5.9CVSS 3.1

AVNACHPRNUINSUCNIHAN

EPSS

20.39%

97.2th percentile

Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
check_point	check_point_ipsec_vpn	—	—
checkpoint	ipsec_vpn	—	—
checkpoint	ipsec_vpn	—	—

CVSS provenance

nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.