7.2
CVSSv2

CVE-2008-0662

Published: 08/02/2008 Updated: 25/01/2024
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoint\SecuRemote registry key, which has Everyone/Full Control permissions, which allows local users to gain privileges by reading and reusing the credentials.

Vulnerable Product Search on Vulmon Subscribe to Product

checkpoint vpn-1 secureclient ngx_r60

checkpoint vpn-1 secureclient ngai_r56