PT-2014-2011 · Check Point · Check Point Security Gateway

Published 2014-01-29 · Updated 2014-04-01 · CVE-2013-7350

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Security Gateway 80 versions R71.x through R71.44 Check Point Security Gateway 600 and 1100 appliances versions R75.20.x through R75.20.41 Check Point Security Gateway versions R75.20.x through R75.20.3

Description The issue is related to multiple unspecified vulnerabilities in Check Point Security Gateway, which may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. These vulnerabilities are associated with insufficient access restrictions to certain functions.

Recommendations For Check Point Security Gateway 80 versions R71.x through R71.44, update to version R71.45 or later. For Check Point Security Gateway 600 and 1100 appliances versions R75.20.x through R75.20.41, update to version R75.20.42 or later. For Check Point Security Gateway versions R75.20.x through R75.20.3, update to version R75.20.4 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-03758

CVE-2013-7350

Affected Products

Check Point Security Gateway

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-7350 · Security Note
• https://bdu.fstec.ru/vul/2019-03758 · Security Note
• http://osvdb.org/102745 · Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98332&src=securityAlerts · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7350 · Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98332&src=securityAlerts · Note