CVE-2014-1672 Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which...
MediumCVSS 4.0
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint management server | = r75.47 | No fix listed |
| checkpoint security gateway | = r75.47 | No fix listed |
References
- checkpoint-gateway-cve20141672-sec-bypass(90976) vdb-entry
- supportcenter.checkpoint.com vendor-advisory