CVE-2011-1827

Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX control or (2) Java applet.

Published: Oct 5, 2011
Updated: Apr 13, 2023
CVE: CVE-2011-1827
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
checkpoint / vpn-1_firewall-1_vsx	r65.20	r65.20.x
checkpoint / connectra_ngx	r66.1	r66.1.x
checkpoint / vpn-1_firewall-1_vsx	r67	r67.x
checkpoint / vpn-1	r75	r75.x
checkpoint / vpn-1	r71.30	r71.30.x
checkpoint / connectra_ngx	r66.1n	r66.1n.x
checkpoint / vpn-1	r65.70	r65.70.x
checkpoint / vpn-1	r70.40	r70.40.x

http://www.securityfocus.com/bid/47695
http://www.vupen.com/english/advisories/2011/1162
https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk62410
https://www.sec-consult.com/en/advisories.html#a68

Vulnerability Database

289,599

CVE-2011-1827