Multi Domain Security Management Server
Monthly
Authentication bypass in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) lets an unauthenticated remote attacker with network access to Management services execute arbitrary commands and fully compromise the management system. It affects a broad range of releases (R80 through R82.10) including R81.20 and R82 running Jumbo Hotfix Accumulator takes at or below fixed thresholds. There is no public exploit identified at time of analysis; Check Point found the flaw internally and reports no indication of active exploitation despite the critical CVSS 4.0 score of 9.3.
Authentication bypass in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) lets an unauthenticated remote attacker with network access to Management services execute arbitrary commands and fully compromise the management system. It affects a broad range of releases (R80 through R82.10) including R81.20 and R82 running Jumbo Hotfix Accumulator takes at or below fixed thresholds. There is no public exploit identified at time of analysis; Check Point found the flaw internally and reports no indication of active exploitation despite the critical CVSS 4.0 score of 9.3.