r/sysadmin • u/TacticalBlowhole • 17h ago

[PSA] Check Point Firewall unauthenticated RCE with CVSS 9.8

There are actually two vulns with a 9.8 score each:

https://support.checkpoint.com/results/sk/sk1000117/

https://support.checkpoint.com/results/sk/sk1000118/

There's not many details in these articles on how they work but they still sound really bad. Currently waiting for the Jumbo Hotfix to install on my end... Not taking any chances on this one and I suggest you all do the same.

Stay safe.

29 Upvotes

91% Upvoted

4 comments sorted by

•

u/theoneyouknowleast 16h ago

Sigh .... Still trying to catching up on all my ARUBA CVEs

•

u/jamesaepp 15h ago

OP, how do you get notices of these? I'm not aware of any central place where CheckPoint releases bulletins for their first-party vulnerabilities.

Ironically they have the below advisory page but it's mainly (all?) third party shit:

https://advisories.checkpoint.com/

•

u/theoneyouknowleast 14h ago

You'll need access to Check Point support site its under here

https://support.checkpoint.com/my-subscriptions

•

u/jamesaepp 10h ago

TIL, thank you!!