« Volver al listado

CVE-2011-1827

Estado: ModificadaAlta (9.3)—

Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX control or (2) Java applet.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Checkpoint — Connectra NGXCheckpoint — Vpn-1Checkpoint — Vpn-1 Firewall-1 VSX

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1827",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-10-05T02:56:24.753",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/47695",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/1162",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk62410",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.sec-consult.com/en/advisories.html#a68",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/47695",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/1162",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk62410",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.sec-consult.com/en/advisories.html#a68",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX control or (2) Java applet."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades sin especificar en Check Point SSL Network Extender (SNX), SecureWorkSpace y Endpoint Security On-Demand, como se distribuye en SecurePlatform, IPSO6, Connectra and VSX. Permite a atacantes remotos ejecutar código arbitrario a través de vectores que involucran un (1) control ActiveX o (2) applet de Java."
    }
  ],
  "lastModified": "2026-06-16T23:30:11.820",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:checkpoint:connectra_ngx:r66.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62BDB1C3-D758-419E-A6AC-E233F99CF268"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:connectra_ngx:r66.1n:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9419EED4-63F0-46A9-AC83-79C2FF60A73B"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:vpn-1:r65.70:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D56F0F77-45E4-44D0-96E6-EEA9DC857701"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:vpn-1:r70.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54839D2D-9ED5-4808-85C0-AA428A29A6A6"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:vpn-1:r71.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1472550E-7AFB-4088-9626-43122F5929E3"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:vpn-1:r75:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E601F27E-4F72-430F-931D-11F6A4DEBD96"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:vpn-1_firewall-1_vsx:r65.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB63AE56-C53D-4AB4-9E62-A749829A5C2B"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:vpn-1_firewall-1_vsx:r67:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AF453B3-8E28-4F4C-AA83-044391C02954"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}