Unscored severity · published Mar 20, 2008
CVE-2008-1397
Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's endpoint RFC1918 IP addresses, and then using SecuRemote to connect to a network interface at the other endpoint.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Check Point Vpn-1 Pro · Checkpoint
ngx_r61; ngx_r62_ga · source: NVD
VP
Vpn-1 · Checkpoint
ngx_r60 · source: NVD
VF
Vpn-1 Firewall-1 · Checkpoint
ng_ai_r55 · source: NVD
VP
Vpn-1 Power Utm · Checkpoint
ngx_r65_with_messaging_security · source: NVD
VP
Vpn-1 Power Utm With Ngx · Checkpoint
r65 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1397
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1397
puresecurity.com.au
http://puresecurity.com.au/index.php?action=fullnews&id=5
Vendor Advisory
http://secunia.com/advisories/29394
US Government Resource
http://www.kb.cert.org/vuls/id/992585
Exploit
http://www.puresecurity.com.au/files/PureSecurity%20VPN-1%20DoS_Spoofing%20Attack%20against%20VPN%20tunnels.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/28299
www.securitytracker.com
http://www.securitytracker.com/id?1019666