3.5
CVSSv2

CVE-2019-8458

Published: 20/06/2019 Updated: 22/10/2020
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 4.4 | Impact Score: 3.6 | Exploitability Score: 0.7
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P

Vulnerability Summary

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

checkpoint endpoint security clients

checkpoint remote access clients

checkpoint capsule docs