What’s Vulnerable › Vulnerabilities
CVE-2023-28130
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 20.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-07-26 · updated 2026-06-17
- Weakness: CWE-20
Description
Local user may lead to privilege escalation using Gaia Portal hostnames page.
Affected products
- checkpoint Gaia Portal: r80.40, r81, r81.10, r81.20
References
- http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
- http://seclists.org/fulldisclosure/2023/Aug/4
- http://seclists.org/fulldisclosure/2023/Jul/43
- https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
- https://support.checkpoint.com/results/sk/sk181311
- http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
- http://seclists.org/fulldisclosure/2023/Aug/4
- http://seclists.org/fulldisclosure/2023/Jul/43
- https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
- https://support.checkpoint.com/results/sk/sk181311
Get alerted when CVE-2023-28130 or the next vulnerability affects your stack