What’s Vulnerable › Vulnerabilities

CVE-2020-6014

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-02 · updated 2026-06-17
• Weakness: CWE-114

Description

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Affected products

• Check Point Endpoint Security Client for Windows: before e83.20 — fixed in e83.20

How to fix

Upgrade to a fixed version: Check Point Endpoint Security Client for Windows e83.20. Check the vendor advisory for mitigations.

References

• https://supportcontent.checkpoint.com/solutions?id=sk168081
• https://supportcontent.checkpoint.com/solutions?id=sk168081

Get alerted when CVE-2020-6014 or the next vulnerability affects your stack