📦

firewall-1

Vendor: checkpoint

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 8 Code Available
Total RCEs 2 Remote Access
Total CVEs 94 Total Indexed
Avg. EPSS 3.30% Exploit Prob.
Latest CVE CVE-2006-3885 Jul 27

Security Vulnerability Index

Page 3 / 10
7.5 CVSS
CVE-2001-1176
RCE

Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.

EPSS: 2.76%
7.5 CVSS
CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.

EPSS: 3.20%
5.0 CVSS
CVE-2001-0182

FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources.

EPSS: 1.63%
7.5 CVSS
CVE-2001-0082
Exploit Found

Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets.

EPSS: 2.43%
7.5 CVSS
CVE-2000-1037
Exploit Found

Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack.

EPSS: 3.35%
5.0 CVSS
CVE-2000-1032

The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall.

EPSS: 1.81%
7.5 CVSS
CVE-2000-0807

The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the "OPSEC Authentication Vulnerability."

EPSS: 1.68%
5.0 CVSS
CVE-2000-0806

The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."

EPSS: 2.09%
7.5 CVSS
CVE-2000-0804

Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka "One-way Connection Enforcement Bypass."

EPSS: 1.67%
7.5 CVSS
CVE-2000-0805

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."

EPSS: 1.35%