CVE-2018-8790CWE-863

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM

published March 1, 2019

CVSS
—
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00394 · 32.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-03-01T16:00Z
EPSS history
Timeline
  • 01 MAR 16:00Z
    Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM
    cvelistv5