What’s Vulnerable › Vulnerabilities

CVE-2022-23742

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-12 · updated 2026-06-17
• Weakness: CWE-65

Description

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.

Affected products

• Check Point Endpoint Security Client for Windows: before e86.40 — fixed in e86.40

How to fix

Upgrade to a fixed version: Check Point Endpoint Security Client for Windows e86.40. Check the vendor advisory for mitigations.

References

• https://supportcontent.checkpoint.com/solutions?id=sk178665%2C
• https://supportcontent.checkpoint.com/solutions?id=sk179132
• https://supportcontent.checkpoint.com/solutions?id=sk178665%2C
• https://supportcontent.checkpoint.com/solutions?id=sk179132

Get alerted when CVE-2022-23742 or the next vulnerability affects your stack