CVEvulnerability

CVE-2008-1397

6.5 MEDIUM Published 2008-03-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-264

Description

Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage), and possibly intercept network traffic, by configuring the local RFC1918 IP address to be the same as one of this tunnel's endpoint RFC1918 IP addresses, and then using SecuRemote to connect to a network interface at the other endpoint.

Affected configurations

• checkpoint check point vpn-1 pro ngx r61 • checkpoint check point vpn-1 pro ngx r62 ga • checkpoint vpn-1 ngx r60 • checkpoint vpn-1 firewall-1 ng ai r55 • checkpoint vpn-1 power utm ngx r65 with messaging security • checkpoint vpn-1 power utm with ngx r65

Related

Weakness · not in database (1)

References