What is the CVSS score of CVE-2012-2753?

CVE-2012-2753 has a CVSS 2.0 base score of 6.9 (Medium). CVSS vector: AV:L/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2012-2753?

Yes, a patch is available for CVE-2012-2753. Update the affected software to the latest version immediately.

Endpoint Connect CVE-2012-2753

MEDIUM

2012-06-19 cve@mitre.org

Information Disclosure Endpoint Connect Endpoint Security Endpoint Security Vpn Remote Access Clients

6.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jun 19, 2012 - 20:55 cve.org

MEDIUM 6.9

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory. Affected products include: Checkpoint Endpoint Connect, Checkpoint Endpoint Security, Checkpoint Endpoint Security Vpn, Checkpoint Remote Access Clients.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.