CVE-2019-8456 Auth bypass in Check Point IPsec VPN
An attacker with internal configuration knowledge can bypass authentication to connect to a site-to-site VPN server in specific conditions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-8456?
CVE-2019-8456 is a medium-severity authentication bypass vulnerability in Check Point IPsec VPN, published on 9 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server.
Weakness: CWE-284
Which versions are affected by CVE-2019-8456?
It affects 1 product.
Products include Checkpoint Ipsec Vpn.
How do I fix CVE-2019-8456?
No fix has been published for CVE-2019-8456 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-8456 being exploited?
There is no known exploitation of CVE-2019-8456 in the wild and no public exploit code.
Sources
Also known as GHSA-2337-9jrr-74j5.