Check Point Endpoint Security Initial Client for Windows是以色列Check Point公司的一款基于Windows平台的、用于Check Point Endpoint Security端点安全管理软件的客户端应用程序。
基于Windows平台的Check Point Endpoint Security Initial Client E81.30之前版本中存在安全漏洞。攻击者可借助特制的DLL利用该漏洞获取LPE。
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160812
来源:MISC
链接:https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160812
来源:MISC
链接:https://safebreach.com/Post/Check-Point-Endpoint-Security-Initial-Client-for-Windows-Privilege-Escalation-to-SYSTEM
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-8461
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Check-Point-Endpoint-Security-Initial-Client-for-Windows-executing-DLL-code-30209
