Back to Database
Status published
Critical
CVE-2019-8459
Check Point Endpoint Security Client for Windows, with the VPN...
Vulnerability Description
Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8459
Credits & Attribution
No credits recorded in the NVD database.
More from Check Point
View All →CVE-2024-6233
Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability
High
7.8
CVE-2019-8463
A denial of service vulnerability was reported in Check Point...
High
7.5
CVE-2019-8458
Check Point Endpoint Security Client for Windows, with Anti-Malware blade...
Medium
4.4
CVE-2019-8456
Check Point IKEv2 IPsec VPN up to R80.30, in some...
Medium
5.9
CVE-2019-8454
A local attacker can create a hard-link between a file...
High
7
Affected Vendor
Check Point
View all reports →Affected Software
Check Point Endpoint Security Client for Windows, VPN blade
Vulnerable Versions:
before E80.83
Timeline
Official Publish:
June 20th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H