CVE-2014-1672: Medium severity Checkpoint Management Server vulnerability

Published Jan 26, 2014

Updated

Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions.

Affected Software

2 affected components

Checkpoint Management Server=r75.47

Checkpoint Security Gateway=r75.47

Event History

Jan 26, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:55 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-1672?

CVE-2014-1672 is classified as a high severity vulnerability due to its potential to allow attackers to bypass intended access restrictions.

How do I fix CVE-2014-1672?

To fix CVE-2014-1672, update your Check Point Security Gateway and Management Server to a version higher than R75.47.

What systems are affected by CVE-2014-1672?

CVE-2014-1672 affects Check Point Management Server and Security Gateway running version R75.47.

What does CVE-2014-1672 exploit?

CVE-2014-1672 exploits improper enforcement of Anti-Spoofing when routing tables are modified.

Can CVE-2014-1672 be exploited remotely?

Yes, CVE-2014-1672 can potentially be exploited remotely due to the nature of the access restrictions it bypasses.