CVE-2021-30360 | BDVDB-2026-167263 Detail

Check Point Remote Access Client

Description#

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privileges.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-427 Uncontrolled Search Path Element

References#

https://supportcontent.checkpoint.com/solutions?id=sk176853
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0001/MNDT-2022-0001.md

Exploit#

No public exploit known

History#

Version 12022-01-07Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.