Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability has been found in Check Point's Security Management and Log Servers, allowing unauthenticated attackers to run code as root on these servers over the network. This vulnerability is significant because the Security Management Server controls firewall policy and administrator access. Check Point has issued a fix for the flaw through its LivePatch update channel. The company currently has no indication that the vulnerability has been exploited. The fix is available, addressing the issue that could be used by attackers without login credentials.