What is CVE-2021-30358?

CVE-2021-30358 is a high-severity vulnerability in Checkpoint Mobile Access Portal Agent, classified under OS Command Injection. CVSS score: 7.2/10. Published 2021-10-19.

How severe is CVE-2021-30358?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Checkpoint Mobile Access Portal Agent

CVE-2021-30358

Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.275 (97.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Checkpoint Mobile_access_portal_agent — versions r80.20, r80.30, r80.40
N/a Check Point Mobile Access Portal Agent — versions before build 800007042

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@checkpoint.com (x_refsource_MISC, Vendor Advisory)
cve@checkpoint.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-30358?: CVE-2021-30358 is a high-severity vulnerability in Checkpoint Mobile Access Portal Agent, classified under OS Command Injection. CVSS score: 7.2/10. Published 2021-10-19.
How severe is CVE-2021-30358?: High severity. CVSS v3 base score is 7.2 out of 10.