Skip to content
OpenAdvisories
Unscored CVE-2018-8790 EUVD-2018-20399GHSA-jhvm-cvpr-9jq3

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary…

Published Mar 1, 2019 · Updated Aug 5, 2024 · Assigned by checkpoint

Vendor: Check Point Software Technologies Product: ZoneAlarm Category: Network devices

Description

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.

Affected products

VendorProductAffectedFixed
Check Point Software Technologies ZoneAlarm prior to version 15.3.064.17729 —

References