Local Privliege Escalation in Check Point Endpoint Security Remediation Service
CVE-2023-28134

7.8HIGH

Key Information:

Vendor
Checkpoint
Status
Harmony Endpoint.
Vendor
CVE Published:
12 November 2023

Summary

A local attacker can exploit this vulnerability to escalate privileges on affected installations of Check Point Harmony Endpoint and ZoneAlarm Extreme Security. The attacker must first gain the ability to execute low-privileged code on the target system, making it crucial to mitigate such weak points in system security.

Affected Version(s)

Harmony Endpoint. E84.x (EOL), E85.x (EOL), E86.x, E87.x before E81.10

References

https://support.checkpoint.com/results/sk/sk181597

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.