CVE-2019-8454
First published: Mon Apr 29 2019(Updated: )
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.
Credit: cve@checkpoint.com cve@checkpoint.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Checkpoint Endpoint Security | <e80.96 | |
| Microsoft Windows | ||
| All of | ||
| Checkpoint Endpoint Security | <e80.96 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-8454?
CVE-2019-8454 is a vulnerability that allows a local attacker to create a hard-link between files in Check Point Endpoint Security client for Windows before E80.96, which can be exploited to run malicious commands.
How does CVE-2019-8454 work?
CVE-2019-8454 works by creating a hard-link between a file to which the Check Point Endpoint Security client writes and another BAT file, allowing the attacker to write malicious BAT commands that will later be executed.
What is the severity of CVE-2019-8454?
CVE-2019-8454 has a severity rating of high, with a severity value of 7.
Which software versions are affected by CVE-2019-8454?
CVE-2019-8454 affects Check Point Endpoint Security client for Windows versions before E80.96.
Is Microsoft Windows affected by CVE-2019-8454?
No, Microsoft Windows is not vulnerable to CVE-2019-8454.
How can I fix CVE-2019-8454?
To fix CVE-2019-8454, it is recommended to update the Check Point Endpoint Security client for Windows to version E80.96 or later.
Where can I find more information about CVE-2019-8454?
More information about CVE-2019-8454 can be found at the following link: [https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012](https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012)
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/checkpoint
- canonical/checkpoint endpoint security
- vendor/microsoft
- canonical/microsoft windows