CVE-2014-8951

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-16 · updated 2026-06-17

Description

Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) Anti-Bot, or (6) Anti-Virus blade is used, allows remote attackers to cause a denial of service (fwk0 process crash, core dump, and restart) via a redirect to the UserCheck page.

Affected products

Check Point Security Gateway: r75, r76, r77, r77.10

References

http://secunia.com/advisories/58487
http://www.securityfocus.com/bid/67993
https://exchange.xforce.ibmcloud.com/vulnerabilities/98761
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100505
http://secunia.com/advisories/58487
http://www.securityfocus.com/bid/67993
https://exchange.xforce.ibmcloud.com/vulnerabilities/98761
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100505

Get alerted when CVE-2014-8951 or the next vulnerability affects your stack