Lucene search
HistoryOct 05, 2011 - 2:56 a.m.
CVE-2011-1827
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.047
Percentile
92.8%
Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX control or (2) Java applet.
Affected configurations
Node
checkpointconnectra_ngxMatchr66.1
ORcheckpointconnectra_ngxMatchr66.1n
ORcheckpointvpn-1Matchr65.70
ORcheckpointvpn-1Matchr70.40
ORcheckpointvpn-1Matchr71.30
ORcheckpointvpn-1Matchr75
ORcheckpointvpn-1_firewall-1_vsxMatchr65.20
ORcheckpointvpn-1_firewall-1_vsxMatchr67
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkpoint | connectra_ngx | r66.1 | cpe:2.3:a:checkpoint:connectra_ngx:r66.1:*:*:*:*:*:*:* |
| checkpoint | connectra_ngx | r66.1n | cpe:2.3:a:checkpoint:connectra_ngx:r66.1n:*:*:*:*:*:*:* |
| checkpoint | vpn-1 | r65.70 | cpe:2.3:a:checkpoint:vpn-1:r65.70:*:*:*:*:*:*:* |
| checkpoint | vpn-1 | r70.40 | cpe:2.3:a:checkpoint:vpn-1:r70.40:*:*:*:*:*:*:* |
| checkpoint | vpn-1 | r71.30 | cpe:2.3:a:checkpoint:vpn-1:r71.30:*:*:*:*:*:*:* |
| checkpoint | vpn-1 | r75 | cpe:2.3:a:checkpoint:vpn-1:r75:*:*:*:*:*:*:* |
| checkpoint | vpn-1_firewall-1_vsx | r65.20 | cpe:2.3:a:checkpoint:vpn-1_firewall-1_vsx:r65.20:*:*:*:*:*:*:* |
| checkpoint | vpn-1_firewall-1_vsx | r67 | cpe:2.3:a:checkpoint:vpn-1_firewall-1_vsx:r67:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2011-10-05 02:56:00
nessus
nessus
Check Point SSL Network Extender ActiveX Control Remote Code Execution
2011-08-25 00:00:00
MS 2562937: Update Rollup for ActiveX Kill Bits (2562937)
2011-08-10 00:00:00
seebug
seebug
Check Point SSL VPN On-DemandεΊη¨η¨εΊθΏη¨δ»£η ζ§θ‘ζΌζ΄
2011-05-04 00:00:00
securityvulns
securityvulns
cvelist
cvelist
CVE-2011-1827
2011-10-05 01:00:00
cve
cve
CVE-2011-1827
2011-10-05 02:56:24
openvas
openvas
Microsoft Windows ActiveX Control Multiple Vulnerabilities (2562937)
2011-08-11 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.7
Confidence
Low
EPSS
0.047
Percentile
92.8%
Related for NVD:CVE-2011-1827