CVE-2013-5635: Low severity checkpoint endpoint security clients vulnerability

Published Nov 30, 2013

Updated

Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly maintain the state of password failures, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by entering password guesses within multiple Unlock.exe processes that are running simultaneously.

Affected Software

7 affected components

Checkpoint Endpoint Security=e80

Checkpoint Endpoint Security=e80.10

Checkpoint Endpoint Security=e80.20

Checkpoint Endpoint Security=e80.30

Checkpoint Endpoint Security=e80.40

Checkpoint Endpoint Security=e80.41

Checkpoint Endpoint Security=e80.50

Remediation

Patch Available

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96589

Event History

Nov 30, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5635?

CVE-2013-5635 has a moderate severity level due to its potential to allow unauthorized access through password bypass.

How do I fix CVE-2013-5635?

To fix CVE-2013-5635, upgrading to a later version of Check Point Endpoint Security beyond E80.50 is recommended.

Can CVE-2013-5635 be exploited remotely?

CVE-2013-5635 requires physical access to the device for an attacker to exploit the vulnerability.

What are the affected versions in CVE-2013-5635?

Affected versions of Check Point Endpoint Security include E80 through E80.50.

What type of attacks can CVE-2013-5635 facilitate?

CVE-2013-5635 can facilitate brute-force attacks on the device-locking mechanism.