CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 78,0%
Kerentanan Improper Authentication pada checkpoint multi-domain security management. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 22 Juli 2026, artinya sudah terbukti dieksploitasi.
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| checkpoint | multi-domain security management | Versi r77.30 hingga sebelum r81.20 |
| checkpoint | multi-domain security management | Versi r81.20 |
| checkpoint | multi-domain security management | Versi r81.20 take_10 |
| checkpoint | multi-domain security management | Versi r81.20 take_101 |
| checkpoint | multi-domain security management | Versi r81.20 take_103 |
| checkpoint | multi-domain security management | Versi r81.20 take_105 |
| checkpoint | multi-domain security management | Versi r81.20 take_111 |
| checkpoint | multi-domain security management | Versi r81.20 take_113 |
| checkpoint | multi-domain security management | Versi r81.20 take_115 |
| checkpoint | multi-domain security management | Versi r81.20 take_118 |
| checkpoint | multi-domain security management | Versi r81.20 take_119 |
| checkpoint | multi-domain security management | Versi r81.20 take_120 |
| checkpoint | multi-domain security management | Versi r81.20 take_122 |
| checkpoint | multi-domain security management | Versi r81.20 take_126 |
| checkpoint | multi-domain security management | Versi r81.20 take_127 |
| checkpoint | multi-domain security management | Versi r81.20 take_14 |
| checkpoint | multi-domain security management | Versi r81.20 take_141 |
| checkpoint | multi-domain security management | Versi r81.20 take_146 |
| checkpoint | multi-domain security management | Versi r81.20 take_24 |
| checkpoint | multi-domain security management | Versi r81.20 take_26 |
| checkpoint | multi-domain security management | Versi r81.20 take_38 |
| checkpoint | multi-domain security management | Versi r81.20 take_41 |
| checkpoint | multi-domain security management | Versi r81.20 take_43 |
| checkpoint | multi-domain security management | Versi r81.20 take_45 |
| checkpoint | multi-domain security management | Versi r81.20 take_53 |
| checkpoint | multi-domain security management | Versi r81.20 take_54 |
| checkpoint | multi-domain security management | Versi r81.20 take_65 |
| checkpoint | multi-domain security management | Versi r81.20 take_70 |
| checkpoint | multi-domain security management | Versi r81.20 take_76 |
| checkpoint | multi-domain security management | Versi r81.20 take_79 |
| checkpoint | multi-domain security management | Versi r81.20 take_8 |
| checkpoint | multi-domain security management | Versi r81.20 take_84 |
| checkpoint | multi-domain security management | Versi r81.20 take_89 |
| checkpoint | multi-domain security management | Versi r81.20 take_90 |
| checkpoint | multi-domain security management | Versi r81.20 take_92 |
| checkpoint | multi-domain security management | Versi r81.20 take_96 |
| checkpoint | multi-domain security management | Versi r81.20 take_98 |
| checkpoint | multi-domain security management | Versi r81.20 take_99 |
| checkpoint | multi-domain security management | Versi r82 |
| checkpoint | multi-domain security management | Versi r82 take_10 |
| checkpoint | multi-domain security management | Versi r82 take_103 |
| checkpoint | multi-domain security management | Versi r82 take_107 |
| checkpoint | multi-domain security management | Versi r82 take_12 |
| checkpoint | multi-domain security management | Versi r82 take_14 |
| checkpoint | multi-domain security management | Versi r82 take_18 |
| checkpoint | multi-domain security management | Versi r82 take_19 |
| checkpoint | multi-domain security management | Versi r82 take_25 |
| checkpoint | multi-domain security management | Versi r82 take_33 |
| checkpoint | multi-domain security management | Versi r82 take_34 |
| checkpoint | multi-domain security management | Versi r82 take_36 |
| checkpoint | multi-domain security management | Versi r82 take_39 |
| checkpoint | multi-domain security management | Versi r82 take_41 |
| checkpoint | multi-domain security management | Versi r82 take_43 |
| checkpoint | multi-domain security management | Versi r82 take_44 |
| checkpoint | multi-domain security management | Versi r82 take_60 |
| checkpoint | multi-domain security management | Versi r82 take_73 |
| checkpoint | multi-domain security management | Versi r82 take_91 |
| checkpoint | multi-domain security management | Versi r82.10 |
| checkpoint | multi-domain security management | Versi r82.10 take_19 |
| checkpoint | multi-domain security management | Versi r82.10 take_24 |