Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point has addressed two critical vulnerabilities related to VPN certificate handling in its firewall and management products. These flaws could potentially allow an unauthenticated remote attacker to execute code, but this is only possible under specific, undisclosed conditions. One vulnerability affects the company's Security Gateways, which are its firewall appliances, while the other affects both these gateways and the company's Security Management products. The vulnerabilities are considered critical due to their potential impact. Check Point has issued patches for these issues. The company has not provided detailed information on the specific conditions required for exploitation.