Back to Database
Status published
High
CVE-2019-8454
A local attacker can create a hard-link between a file...
Vulnerability Description
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8454
Credits & Attribution
No credits recorded in the NVD database.
More from Check Point
View All →CVE-2024-6233
Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability
High
7.8
CVE-2019-8463
A denial of service vulnerability was reported in Check Point...
High
7.5
CVE-2019-8459
Check Point Endpoint Security Client for Windows, with the VPN...
Critical
9.8
CVE-2019-8458
Check Point Endpoint Security Client for Windows, with Anti-Malware blade...
Medium
4.4
CVE-2019-8456
Check Point IKEv2 IPsec VPN up to R80.30, in some...
Medium
5.9
Affected Vendor
Check Point
View all reports →Affected Software
Check Point Endpoint Security client for Windows
Vulnerable Versions:
before E80.96
Timeline
Official Publish:
April 29th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.