ID
VAR-202011-1464
CVE
CVE-2020-6014
TITLE
Windows for Check Point Endpoint Security Client Untrusted search path vulnerabilities in
Trust: 0.8
sources:
JVNDB: JVNDB-2020-013232
DESCRIPTION
Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate. Check Point Endpoint Security Client is a terminal security protection software from Israel Check Point Company
Trust: 1.8
sources:
NVD: CVE-2020-6014 //
JVNDB: JVNDB-2020-013232 //
VULHUB: VHN-184139 //
VULMON: CVE-2020-6014
AFFECTED PRODUCTS
| vendor: | checkpoint | model: | endpoint security | scope: | lt | version: | e83.20 | Trust: 1.0 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | endpoint security | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | endpoint security | scope: | eq | version: | e83.20 | Trust: 0.8 |
sources:
JVNDB: JVNDB-2020-013232 //
NVD: CVE-2020-6014
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
sources:
VULHUB: VHN-184139 //
JVNDB: JVNDB-2020-013232 //
CNNVD: CNNVD-202010-1666 //
NVD: CVE-2020-6014
PROBLEMTYPE DATA
| problemtype: | CWE-426 | Trust: 1.1 |
| problemtype: | CWE-114 | Trust: 1.0 |
| problemtype: | Untrusted search path (CWE-426) [NVD Evaluation ] | Trust: 0.8 |
sources:
VULHUB: VHN-184139 //
JVNDB: JVNDB-2020-013232 //
NVD: CVE-2020-6014
THREAT TYPE
local
Trust: 0.6
sources:
CNNVD: CNNVD-202010-1666
TYPE
code problem
Trust: 0.6
sources:
CNNVD: CNNVD-202010-1666
PATCH
| title: | sk168081 | url: | https://supportcontent.checkpoint.com/solutions?id=sk168081 | Trust: 0.8 |
sources:
JVNDB: JVNDB-2020-013232
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-6014 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2020-013232 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202010-1666 | Trust: 0.7 |
| db: | VULHUB | id: | VHN-184139 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2020-6014 | Trust: 0.1 |
sources:
VULHUB: VHN-184139 //
VULMON: CVE-2020-6014 //
JVNDB: JVNDB-2020-013232 //
CNNVD: CNNVD-202010-1666 //
NVD: CVE-2020-6014
REFERENCES
| url: | https://supportcontent.checkpoint.com/solutions?id=sk168081 | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-6014 | Trust: 1.4 |
| url: | https://vigilance.fr/vulnerability/check-point-endpoint-security-client-for-windows-vulnerability-33739 | Trust: 0.6 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
sources:
VULHUB: VHN-184139 //
VULMON: CVE-2020-6014 //
JVNDB: JVNDB-2020-013232 //
CNNVD: CNNVD-202010-1666 //
NVD: CVE-2020-6014
SOURCES
| db: | VULHUB | id: | VHN-184139 |
| db: | VULMON | id: | CVE-2020-6014 |
| db: | JVNDB | id: | JVNDB-2020-013232 |
| db: | CNNVD | id: | CNNVD-202010-1666 |
| db: | NVD | id: | CVE-2020-6014 |
LAST UPDATE DATE
2024-11-23T22:58:06.455000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-184139 | date: | 2020-11-19T00:00:00 |
| db: | VULMON | id: | CVE-2020-6014 | date: | 2020-11-19T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-013232 | date: | 2021-06-22T05:05:00 |
| db: | CNNVD | id: | CNNVD-202010-1666 | date: | 2020-11-24T00:00:00 |
| db: | NVD | id: | CVE-2020-6014 | date: | 2024-11-21T05:34:59.040 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-184139 | date: | 2020-11-02T00:00:00 |
| db: | VULMON | id: | CVE-2020-6014 | date: | 2020-11-02T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-013232 | date: | 2021-06-22T00:00:00 |
| db: | CNNVD | id: | CNNVD-202010-1666 | date: | 2020-10-29T00:00:00 |
| db: | NVD | id: | CVE-2020-6014 | date: | 2020-11-02T21:15:34.163 |