- Description
- Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 4.9
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:P/I:P/A:N
- nvd@nist.gov
- CWE-264
- Hype score
- Not currently trending
- Comment
- -
- Impact
- -
- Solution
- -
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:checkpoint:management_server:r75.47:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D380B0BF-5D47-48CA-A090-B95AB14EBBB8"
},
{
"criteria": "cpe:2.3:a:checkpoint:security_gateway:r75.47:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F10C3DB-F956-4627-A9BC-46E0BFB2FB1C"
}
],
"operator": "OR"
}
]
}
]