CVE-2014-8951 Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) An...
HighCVSS 7.1
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) Anti-Bot, or (6) Anti-Virus blade is used, allows remote attackers to cause a denial of service (fwk0 process crash, core dump, and restart) via a redirect to the UserCheck page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint security gateway | = r75 | No fix listed |
| checkpoint security gateway | = r76 | No fix listed |
| checkpoint security gateway | = r77 | No fix listed |
| checkpoint security gateway | = r77.10 | No fix listed |
References
- 58487 third-party-advisory
- 67993 vdb-entry
- security-gateway-cve20148951-dos(98761) vdb-entry
- supportcenter.checkpoint.com vendor-advisory