Vulnerability CVE-2013-5636


Published: 2013-11-30

Description:
Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not associate password failures with a device ID, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by overwriting DVREM.EPM with a copy of itself after each few password guesses.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Checkpoint Endpoint Security Media Encryption EPM Explorer Bypass
Pedro Andujar
15.11.2013

Type:

CWE-255

(Credentials Management)

CVSS2 => (AV:L/AC:M/Au:N/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.3/10
4.9/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
Checkpoint -> Endpoint security 

 References:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk96589
http://www.digitalsec.net/stuff/explt+advs/CheckPoint_EndPoint_EPM_Explorer.txt

Copyright 2024, cxsecurity.com

 

Back to Top