CVE-2013-5636

Published: Nov 30, 2013Modified: Apr 29, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not associate password failures with a device ID, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by overwriting DVREM.EPM with a copy of itself after each few password guesses.

Affected (7)

Products: Checkpoint: Endpoint Security

Checkpoint

1 product

Endpoint Security

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Endpoint Security	Version e80.10
Checkpoint Endpoint Security	Version e80.20
Checkpoint Endpoint Security	Version e80.30
Checkpoint Endpoint Security	Version e80.40
Checkpoint Endpoint Security	Version e80.41
Checkpoint Endpoint Security	Version e80.50
Checkpoint Endpoint Security	Version e80

Related CWEs

CWE-255

References (4)

http://www.digitalsec.net/stuff/explt+advs/CheckPoint_EndPoint_EPM_Explorer.txt

Source: cve@mitre.org

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96589

Source: cve@mitre.org

PatchVendor Advisory

http://www.digitalsec.net/stuff/explt+advs/CheckPoint_EndPoint_EPM_Explorer.txt

Source: af854a3a-2127-422b-91ae-364da2661108

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96589

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.