Check Point Endpoint Security Initial Client up to E81.29 on Windows DLL untrusted search path

Summaryinfo

A vulnerability classified as critical has been found in Check Point Endpoint Security Initial Client up to E81.29 on Windows. Affected by this vulnerability is an unknown functionality of the component DLL Handler. The manipulation leads to untrusted search path. This vulnerability is traded as CVE-2019-8461. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Check Point Endpoint Security Initial Client up to E81.29 on Windows. It has been rated as critical. This issue affects some unknown processing of the component DLL Handler. The manipulation with an unknown input leads to a untrusted search path vulnerability. Using CWE to declare the problem leads to CWE-426. The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with write permissions to the user.

The weakness was shared 08/29/2019. The identification of this vulnerability is CVE-2019-8461 since 02/18/2019. Attacking locally is a requirement. Required for exploitation is a simple authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1574 according to MITRE ATT&CK.

Upgrading to version E81.30 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Check Point

Name

• Endpoint Security Initial Client

Version

• E81.0
• E81.1
• E81.2
• E81.3
• E81.4
• E81.5
• E81.6
• E81.7
• E81.8
• E81.9
• E81.10
• E81.11
• E81.12
• E81.13
• E81.14
• E81.15
• E81.16
• E81.17
• E81.18
• E81.19
• E81.20
• E81.21
• E81.22
• E81.23
• E81.24
• E81.25
• E81.26
• E81.27
• E81.28
• E81.29

License

• commercial

Website

• Vendor: https://www.checkpoint.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion