CVE Intelligence
Skip to main content

CVE-2019-8458

CVE-2019-8458 Vulnerability Analysis & Exploit Intelligence

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Published Updated Sources: cvelistV5, checkpoint

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the scoring sources call it.

Exploitation

Unreported

no source claims exploitation

EPSS

1%

chance of exploitation in 30 days

Affects

check point

check_point_endpoint_security_client_for_windows_anti_malware_blade

CVSS base

Unscored

no source published a base score

Affected scope

The catalog records vendors and products as separate lists, not pairs, so which product belongs to which vendor is not something this page can say.

Vendors (1)

check point

Products (1)

check point endpoint security client for windows anti malware blade

Weakness & attack patterns

  • CWE-114

Attack patterns reported against this CVE. The ATT&CK techniques below are inferred from its weakness class.

  • T1505.005Server Software Component: Terminal Services DLL
  • T1574.006Hijack Execution Flow: Dynamic Linker Hijacking
  • T1574.013Hijack Execution Flow: KernelCallbackTable

References

1 on the record

Elsewhere on this site

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

  • No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
  • No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
  • No exploit packet captures, log samples, or incident case IDs supplied.