Vulnerabilities > CVE-2013-5636 - Credentials Management vulnerability in Checkpoint Endpoint Security

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

checkpoint

CWE-255

NVD

Published: 2013-11-30

Updated: 2024-11-21

Summary

Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not associate password failures with a device ID, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by overwriting DVREM.EPM with a copy of itself after each few password guesses.

Vulnerable Configurations

Part	Description	Count
Application	Checkpoint Checkpoint Endpoint Security E80.40 Checkpoint Endpoint Security E80.10 Checkpoint Endpoint Security E80.41 Checkpoint Endpoint Security E80 Checkpoint Endpoint Security E80.50 Checkpoint Endpoint Security E80.20 Checkpoint Endpoint Security E80.30	7

Common Weakness Enumeration (CWE)

CWE-255 - Credentials Management

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References