PT-2022-10015 · Check Point · Check Point Remote Access Client

Ronnie Salomonsen · Published 2022-01-07 · Updated 2022-01-14 · CVE-2021-30360

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Check Point Remote Access Client (affected versions not specified)

Description The issue allows regular users to initiate the installation repair of the Check Point Remote Access Client, potentially enabling an attacker to place a specially crafted EXE in the repair folder. This EXE would run with the privileges of the Check Point Remote Access Client.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2021-30360

Affected Products

Check Point Remote Access Client

References · 4

• 🔥 https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0001/MNDT-2022-0001.md · Exploit
• https://supportcontent.checkpoint.com/solutions?id=sk176853 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30360 · Security Note
• https://osv.dev/vulnerability/CVE-2021-30360 · Vendor Advisory