Vulnerabilities > CVE-2018-8790 - Unspecified vulnerability in Checkpoint Zonealarm

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

checkpoint

NVD

Published: 2019-03-01

Updated: 2019-10-09

Summary

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.

Vulnerable Configurations

Part	Description	Count
Application	Checkpoint Checkpoint Zonealarm - Checkpoint Zonealarm 5.0.63.0 Checkpoint Zonealarm 6.1.744.001 Checkpoint Zonealarm 7.0.337.0 Checkpoint Zonealarm 10.2.068.000 Checkpoint Zonealarm 10.2.072.000 Checkpoint Zonealarm 10.2.073.000 Checkpoint Zonealarm 10.2.074.000 Checkpoint Zonealarm 10.2.078.000 Checkpoint Zonealarm 11.0.000.018 Checkpoint Zonealarm 11.0.000.020 Checkpoint Zonealarm 11.0.000.038 Checkpoint Zonealarm 11.0.000.054 Checkpoint Zonealarm 11.0.000.057 Checkpoint Zonealarm 11.0.000.504 Checkpoint Zonealarm 11.0.768.000 Checkpoint Zonealarm 11.0.780.000 Checkpoint Zonealarm 12.0.104.000 Checkpoint Zonealarm 12.0.118.000 Checkpoint Zonealarm 13.0.208.000 Checkpoint Zonealarm 13.1.211.000 Checkpoint Zonealarm 13.2.015.000 Checkpoint Zonealarm 13.3.052.000 Checkpoint Zonealarm 13.3.209.000 Checkpoint Zonealarm 14.0.157.000 Checkpoint Zonealarm 14.0.508.000 Checkpoint Zonealarm 14.0.522.000 Checkpoint Zonealarm 14.1.011.000 Checkpoint Zonealarm 14.1.048.000 Checkpoint Zonealarm 14.1.057.000 Checkpoint Zonealarm 14.2.255.000 Checkpoint Zonealarm 14.3.119.000 Checkpoint Zonealarm 15.0.123.17051 Checkpoint Zonealarm 15.0.139.17085 Checkpoint Zonealarm 15.0.156.17126 Checkpoint Zonealarm 15.0.159.17147 Checkpoint Zonealarm 15.1.501.17249 Checkpoint Zonealarm 15.1.522.17528 Checkpoint Zonealarm 15.2.053.17581 Checkpoint Zonealarm 15.3.060.17669 Checkpoint Zonealarm 15.3.064.17729	41

Summary

Vulnerable Configurations

References