Vulnerability in Checkpoint Check Point Vpn-1 Pro
CVE-2008-1397
Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's endpoint RFC1918 IP addresses, and then using SecuRemote to connect to a network interface at the other endpoint.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.5 (Medium). Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.022 (81.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 81.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.022 · newest: 0.022 · change: 0.000
Affected products
- Checkpoint Check Point Vpn-1 Pro — versions ngx_r61, ngx_r62_ga
- Checkpoint Vpn-1 — versions ngx_r60
- Checkpoint Vpn-1 Firewall-1 — versions ng_ai_r55
- Checkpoint Vpn-1 Power Utm — versions ngx_r65_with_messaging_security
- Checkpoint Vpn-1 Power Utm With Ngx — versions r65
Weakness classification (CWE)
References
- puresecurity.com.au/index.php
- www.securityfocus.com/bid/28299 (vdb-entry)
- www.kb.cert.org/vuls/id/992585 (US Government Resource, third-party-advisory)
- secunia.com/advisories/29394 (Vendor Advisory, third-party-advisory)
- www.securitytracker.com/id (vdb-entry)
- www.puresecurity.com.au/files/PureSecurity VPN-1 DoS_Spoofing Attack against VP… (Exploit)
- www.vupen.com/english/advisories/2008/0953/references (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/41260 (vdb-entry)
- supportcenter.checkpoint.com/supportcenter/portal (Patch)