Description (CNA)
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| checkpoint / Quantum Security Gateway | affected R82.10 with Jumbo Hotfix Take 19 or below; affected R82 with Jumbo Hotfix Take 103 or below; affected R81.20 with Jumbo Hotfix Take 141 or below; affected R81.10, R81, and R80.40 |
| checkpoint / Spark Firewalls | affected R80.20.X, R81.10.X, and R82.00.X |
CWE
CWE-287
References
ADP enrichment
No English description supplied.