CVE-2012-2753: Medium severity checkpoint endpoint connect vulnerability

Published Jun 19, 2012

Updated

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected Software

10 affected components

Checkpoint Endpoint Connect=r73

Checkpoint Endpoint Security=e80

Checkpoint Endpoint Security=e80.10

Checkpoint Endpoint Security=e80.20

Checkpoint Endpoint Security=e80.30

Checkpoint Endpoint Security=r73

Checkpoint Endpoint Security Vpn=r75

Checkpoint Remote Access Clients=e75

Checkpoint Remote Access Clients=e75.10

Checkpoint Remote Access Clients=e75.20

Remediation

Patch Available

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk76480

Event History

Jun 19, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2753?

CVE-2012-2753 has a high severity rating, as it allows local users to gain elevated privileges through an untrusted search path vulnerability.

How do I fix CVE-2012-2753?

To fix CVE-2012-2753, users should update to the latest version of Check Point Endpoint Security that addresses this vulnerability.

Which software versions are affected by CVE-2012-2753?

CVE-2012-2753 affects Check Point Endpoint Connect R73, R75, Endpoint Security E80.x, and Remote Access Clients E75.x.

What are the potential impacts of CVE-2012-2753?

The potential impact of CVE-2012-2753 includes unauthorized privilege escalation, which could lead to further exploitation of the system.

Is CVE-2012-2753 a common vulnerability?

CVE-2012-2753 is a known vulnerability that has been reported and recognized in various security advisories and databases.