Description
Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Quantum Security Gateway | checkpoint / Quantum Security Gateway | R81.10, R81, and R80.40 | affected |
| Quantum Security Gateway | checkpoint / Quantum Security Gateway | R81.20 with Jumbo Hotfix Take 141 or below | affected |
| Quantum Security Gateway | checkpoint / Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 19 or below | affected |
| Quantum Security Gateway | checkpoint / Quantum Security Gateway | R82 with Jumbo Hotfix Take 103 or below | affected |
| Spark Firewalls | checkpoint / Spark Firewalls | R80.20.X, R81.10.X, and R82.00.X | affected |