PT-2014-2012 · Check Point · Check Point R75.47 Security Gateway+1

Published 2014-01-14 · Updated 2018-01-03 · CVE-2014-1672

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Check Point R75.47 Security Gateway and Management Server

Description The issue is related to a lack of proper enforcement of Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed. This allows attackers to bypass intended access restrictions. The vulnerability is also associated with insufficient access control to certain features, which can be exploited by a remote attacker to bypass existing access restrictions and conduct spoofing attacks.

Recommendations For Check Point R75.47 Security Gateway and Management Server, consider restricting access to the "Get - Interfaces with Topology" action until a patch is available. As a temporary workaround, review and modify the routing table configuration to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-03759

CVE-2014-1672

Affected Products

Check Point R75.47 Management Server

Check Point R75.47 Security Gateway

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-1672 · Security Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98087 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03759 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1672 · Note
• https://vuldb.com/?id.12229 · Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98087 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90976 · Note