Unscored severity · published Jun 19, 2012
CVE-2012-2753
Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EC
Endpoint Connect · Checkpoint
r73 · source: NVD
ES
Endpoint Security · Checkpoint
e80; e80.10; e80.20; e80.30; r73 · source: NVD
ES
Endpoint Security Vpn · Checkpoint
r75 · source: NVD
RA
Remote Access Clients · Checkpoint
e75; e75.10; e75.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2753
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2753
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-06/0069.html
Patch
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk76480