High severity7.0NVD Advisory· Published Apr 29, 2019· Updated Jun 17, 2026

CVE-2019-8454

Description

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.

Affected products

Checkpoint/Endpoint Security
cpe:2.3:a:checkpoint:endpoint_security:*:*:*:*:*:*:*:*
Range: <e80.96
Checkpoint/Endpoint Security Initial Client for Windowsllm-fuzzy2 versions
<E80.96+ 1 more
- (no CPE)range: <E80.96
- (no CPE)range: before E80.96

Patches

Vulnerability mechanics

References

supportcenter.us.checkpoint.com/supportcenter/portalnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000