CVE-2019-8456

Description

Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

1.772

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-8456 are affected in ipsec_vpn r80.20	NCM
Vulnerabilities CVE-2019-8456 are affected in ipsec_vpn r80.10	NCM
Improper Access Control Vulnerability (CVE-2019-8456)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234