CVE-2021-30360

State: Published
Severity: Not scored
Published: Jan 7, 2022
Updated: Aug 3, 2024
Reserved: Apr 7, 2021

Description

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privileges.

Scores

The record has no CVSS score.

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
Check Point Remote Access Clientn/a	before E86.20Affected

References

https://supportcontent.checkpoint.com/solutions?id=sk176853
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0001/MNDT-2022-0001.md

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.