What’s Vulnerable › Vulnerabilities

CVE-2021-30360

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-01-10 · updated 2026-06-17
• Weakness: CWE-427

Description

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privileges.

Affected products

• Check Point Endpoint Security Client for Windows: before e86.20 — fixed in e86.20

How to fix

Upgrade to a fixed version: Check Point Endpoint Security Client for Windows e86.20. Check the vendor advisory for mitigations.

References

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0001/MNDT-2022-0001.md
• https://supportcontent.checkpoint.com/solutions?id=sk176853
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0001/MNDT-2022-0001.md
• https://supportcontent.checkpoint.com/solutions?id=sk176853

Get alerted when CVE-2021-30360 or the next vulnerability affects your stack