CVE-2019-8458

Published: Jun 20, 2019Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.7 / Impact: 3.6

Source: NVD

Description

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Affected (3)

Products: Checkpoint: Endpoint Security Clients, Remote Access Clients, Capsule Docs

3 products

Endpoint Security Clients

Remote Access Clients

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Endpoint Security Clients	Before e81.00

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Remote Access Clients	Before e81.00

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Capsule Docs	Before e81.00

Related CWEs

Process Control

Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.

References (2)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153053

Source: cve@checkpoint.com

Vendor Advisory

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153053

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.