CVE-2022-23744

Published: Jul 7, 2022Modified: Jun 17, 2026

2.3

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Exploitability: 0.8 / Impact: 1.4

Source: NVD

Description

Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.

Affected (14)

Products: Checkpoint: Endpoint Security, Harmony Endpoint

Checkpoint

2 products

Endpoint Security

Harmony Endpoint

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Endpoint Security	Version e83
Checkpoint Endpoint Security	Version e84
Checkpoint Endpoint Security	Version e85
Checkpoint Endpoint Security	Version e86.10
Checkpoint Endpoint Security	Version e86.20
Checkpoint Endpoint Security	Version e86.30
Checkpoint Endpoint Security	Version e86.40
Checkpoint Harmony Endpoint	Version e83
Checkpoint Harmony Endpoint	Version e84
Checkpoint Harmony Endpoint	Version e85
Checkpoint Harmony Endpoint	Version e86.10
Checkpoint Harmony Endpoint	Version e86.20
Checkpoint Harmony Endpoint	Version e86.30
Checkpoint Harmony Endpoint	Version e86.40

Related CWEs

CWE-470

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

References (2)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179609

Source: cve@checkpoint.com

Vendor Advisory

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179609

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.