CVE-2014-8952

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-11-16 · updated 2026-06-17

Description

Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the (1) IPS blade, (2) IPsec Remote Access, (3) Mobile Access / SSL VPN blade, (4) SSL Network Extender, (5) Identify Awareness blade, (6) HTTPS Inspection, (7) UserCheck, or (8) Data Leak Prevention blade module is enabled, allow remote attackers to cause a denial of service ("stability issue") via an unspecified "traffic condition."

Affected products

Check Point Security Gateway: r75.40-vs, r75.45, r75.46, r75.47, r76, r77 (+1)

References

http://secunia.com/advisories/58487
http://www.securityfocus.com/bid/67993
https://exchange.xforce.ibmcloud.com/vulnerabilities/98762
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100431
http://secunia.com/advisories/58487
http://www.securityfocus.com/bid/67993
https://exchange.xforce.ibmcloud.com/vulnerabilities/98762
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100431

Get alerted when CVE-2014-8952 or the next vulnerability affects your stack