جزئیات آسیب‌پذیری
CVE-2026-18574
checkpoint Multi-Domain Security Management Servercheckpoint Security Management Server
Authentication Bypass in Check Point Security Management Server
CVSS 4.0
9.3بحرانی
شرح رسمی (انگلیسی)
An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.3بحرانی | 4.0 | CVEProject cvelistV5 (CNA) (checkpoint) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| checkpoint | Multi-Domain Security Management Server | R80 | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R80.10 | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R80.20 | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R80.30 | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R80.40 | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R81 | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R81.10 | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R81.20 with Jumbo Hotfix Accumulator Take 160 or below | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R82 with Jumbo Hotfix Accumulator Take 121 or below | CVEProject cvelistV5 (CNA) |
| checkpoint | Multi-Domain Security Management Server | R82.10 with Jumbo Hotfix Accumulator Take 39 or below | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R80 | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R80.10 | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R80.20 | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R80.30 | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R80.40 | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R81 | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R81.10 | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R81.20 with Jumbo Hotfix Accumulator Take 160 or below | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R82 with Jumbo Hotfix Accumulator Take 121 or below | CVEProject cvelistV5 (CNA) |
| checkpoint | Security Management Server | R82.10 with Jumbo Hotfix Accumulator Take 39 or below | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱- https://support.checkpoint.com/results/sk/sk185222 vendor-advisory
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۵/۱۲
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۵/۱۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- checkpoint
پیش‌بینی بهره‌برداری (EPSS)
۰٫۸۹٪
احتمال بهره‌برداری در ۳۰ روز
۵۹٫۵٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-288Authentication Bypass Using an Alternate Path or Channel