PT-2022-3517 · Check Point · Check Point Endpoint

Published 2022-07-07 · Updated 2022-07-15 · CVE-2022-23744

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Check Point Endpoint versions prior to E86.50

Description The issue is related to a failure in protecting against specific registry changes, allowing a local administrator to disable endpoint protection. This could potentially be exploited to compromise the security of certain endpoints.

Recommendations For versions prior to E86.50, update to version E86.50 or later to resolve the issue. As a temporary workaround, consider restricting local administrator privileges to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-470

Related Identifiers

BDU:2022-04298

CVE-2022-23744

Affected Products

Check Point Endpoint

References · 7

• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179609 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23744 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04298 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-23744 · Security Note
• https://t.me/cvenotify/33143 · Telegram Post
• https://t.me/cibsecurity/45753 · Telegram Post
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179609 · Note