High severity · published Jan 20, 2021
CVE-2020-6024
Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Smartconsole · Checkpoint
through r80.10; r80.20; r80.30; r80.40; r81 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6024
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6024
Vendor Advisory
https://supportcontent.checkpoint.com/solutions?id=sk142952
More from Smartconsole
7.8
CVE-2024-24916
Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin)
7.2
CVE-2024-24915
Credentials are not cleared from memory after being used