A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | quantum security gateway | R82.10 with Jumbo Hotfix Take 19 or below, R82 with Jumbo Hotfix Take 103 or below, R81.20 with Jumbo Hotfix Take 141 or below, R81.10, R81, and R80.40, R80.20.X, R81.10.X, and R82.00.X |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| check point | check point mobile access | cert_advisory | 90% |
| check point | check point remote access vpn | cert_advisory | 90% |
Updated severity to CRITICAL, CVSS score to 9.3, and added details about exploitation in the wild and new IoCs.
Updated description with new details about critical authentication bypass vulnerability and confirmed active exploitation linked to the Qilin ransomware gang.
Initial creation
