CVE-2013-5635

2013-11-3011:43:54

CWE-255

[email protected]

web.nvd.nist.gov

cve-2013-5635

media encryption

epm explorer

check point endpoint security

e80.50

password failures

device-locking

attackers

bypass

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.0%

JSON

Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly maintain the state of password failures, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by entering password guesses within multiple Unlock.exe processes that are running simultaneously.

Affected configurations

NVD

Node

checkpointendpoint_securityMatche80-vpn_blade

checkpointendpoint_securityMatche80.10-vpn_blade

checkpointendpoint_securityMatche80.20-vpn_blade

checkpointendpoint_securityMatche80.30-vpn_blade

checkpointendpoint_securityMatche80.40-vpn_blade

checkpointendpoint_securityMatche80.41-vpn_blade

checkpointendpoint_securityMatche80.50-vpn_blade

CPENameOperatorVersion
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.10
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.20
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.30
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.40
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.41
checkpoint:endpoint_securitycheckpoint endpoint securityeqe80.50

CPE	Name	Operator	Version
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.10
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.20
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.30
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.40
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.41
checkpoint:endpoint_security	checkpoint endpoint security	eq	e80.50