PT-2019-4358 · Check Point · Check Point R80.30 Security Gateway

Published 2019-10-02 · Updated 2019-10-09 · CVE-2019-8462

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Check Point R80.30 Security Gateway versions prior to JHF Take 50

Description The issue is related to a rare scenario where the Security Gateway crashes due to a unique configuration of enhanced logging. It is also associated with deficiencies in handling exceptional states when the Threat Prevention Forensics feature is enabled. This could potentially allow a remote attacker to cause a denial of service.

Recommendations For Check Point R80.30 Security Gateway versions prior to JHF Take 50, apply JHF Take 50 to resolve the issue. As a temporary workaround, consider disabling the Threat Prevention Forensics feature until the patch is applied. Restrict access to the enhanced logging configuration to minimize the risk of exploitation.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

BDU:2020-00079

CVE-2019-8462

Affected Products

Check Point R80.30 Security Gateway

References · 7

• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00079 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-8462 · Security Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161812 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8462 · Vendor Advisory
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161812 · Note
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152 · Note