CVE-2013-5636: Low severity checkpoint endpoint security clients vulnerability

Published Nov 30, 2013

Updated

Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not associate password failures with a device ID, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by overwriting DVREM.EPM with a copy of itself after each few password guesses.

Affected Software

7 affected components

Checkpoint Endpoint Security=e80

Checkpoint Endpoint Security=e80.10

Checkpoint Endpoint Security=e80.20

Checkpoint Endpoint Security=e80.30

Checkpoint Endpoint Security=e80.40

Checkpoint Endpoint Security=e80.41

Checkpoint Endpoint Security=e80.50

Remediation

Patch Available

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96589

Event History

Nov 30, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5636?

CVE-2013-5636 is classified as a medium severity vulnerability.

How do I fix CVE-2013-5636?

To mitigate CVE-2013-5636, it is recommended to upgrade to a version of Check Point Endpoint Security that is not affected by this vulnerability.

What impact does CVE-2013-5636 have on Check Point Endpoint Security?

CVE-2013-5636 allows physical attackers to bypass device-locking mechanisms, potentially leading to unauthorized access.

Which versions of Check Point Endpoint Security are affected by CVE-2013-5636?

CVE-2013-5636 affects Check Point Endpoint Security versions E80, E80.10, E80.20, E80.30, E80.40, E80.41, and E80.50.

Is there a workaround for CVE-2013-5636?

Currently, the primary recommendation for CVE-2013-5636 is to update the affected software versions to prevent exploitation.