CVE-2022-23744: Low severity checkpoint endpoint security clients vulnerability

Published Jul 7, 2022

Updated

Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.

Affected Software

14 affected components

Checkpoint Endpoint Security=e83

Checkpoint Endpoint Security=e84

Checkpoint Endpoint Security=e85

Checkpoint Endpoint Security=e86.10

Checkpoint Endpoint Security=e86.20

Checkpoint Endpoint Security=e86.30

Checkpoint Endpoint Security=e86.40

Checkpoint Harmony Endpoint=e83

Checkpoint Harmony Endpoint=e84

Checkpoint Harmony Endpoint=e85

Checkpoint Harmony Endpoint=e86.10

Checkpoint Harmony Endpoint=e86.20

Checkpoint Harmony Endpoint=e86.30

Checkpoint Harmony Endpoint=e86.40

Event History

Jul 7, 2022

CVE Published

via MITRE·03:51 PM

Data Sourced

via MITRE·03:51 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-23744?

CVE-2022-23744 is a vulnerability in Check Point Endpoint before version E86.50 that allows a local administrator to disable endpoint protection by making a specific registry change.

How does CVE-2022-23744 affect Check Point Endpoint Security?

CVE-2022-23744 affects Check Point Endpoint Security versions E83 to E86.40.

What is the severity of CVE-2022-23744?

The severity of CVE-2022-23744 is low with a CVSS severity score of 2.3.

How can I fix CVE-2022-23744?

To fix CVE-2022-23744, users should update to version E86.50 of Check Point Endpoint Security.

Where can I find more information about CVE-2022-23744?

More information about CVE-2022-23744 can be found in the Check Point support center: [link](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179609)