🔴 Critical: New Check Point flaw lets hackers execute code with root privileges
-
Check Point has released security updates to address a critical vulnerability in its Security Management Server and Multi-Domain Security Management Server products. The flaw allows attackers to execute code with root privileges on management systems, making it a serious risk for organizations relying on Check Point's management infrastructure.
According to the vendor's advisory, the vulnerability stems from improper validation of user-supplied data, which can be exploited to run arbitrary code with elevated permissions. Successful exploitation could give an attacker full control over the affected management server.
Affected deployments include:
- Check Point Security Management Server
- Check Point Multi-Domain Security Management Server
Check Point has issued patches to address the issue. Administrators are advised to apply the available updates as soon as possible to prevent potential exploitation on exposed management interfaces.
While no specific CVE identifier was provided in the source, the vendor has confirmed the severity of the issue and released fixes.
Source: BleepingComputer
Has your organization already applied the Check Point updates, or are you still assessing exposure?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login