https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102375#M8043 <P>I was looking around and maybe i'm missing it, but has checkpoint addressed this issue? I'm not finding anything so far. Granted this seems to require write access be enabled which i'm guessing almost no one uses, but I was looking for some clarification.&nbsp;</P> Tue, 17 Nov 2020 18:30:02 GMT John_Fleming 2020-11-17T18:30:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102375#M8043 <P>I was looking around and maybe i'm missing it, but has checkpoint addressed this issue? I'm not finding anything so far. Granted this seems to require write access be enabled which i'm guessing almost no one uses, but I was looking for some clarification.&nbsp;</P> Tue, 17 Nov 2020 18:30:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102375#M8043 John_Fleming 2020-11-17T18:30:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102382#M8044 <P>Fixed in the R80.40 Version: Check Point Gaia releases R77 - R80.30 use 3rd party net-snmp package version 5.4.2.1, Check Point release R80.40 (and above) use net-snmp package version 5.8 (sk158852).</P> Tue, 17 Nov 2020 20:47:51 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102382#M8044 G_W_Albrecht 2020-11-17T20:47:51Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102383#M8045 <P>Oh great, so will you be posting a patch for anything below R80.40 then?</P> Tue, 17 Nov 2020 21:04:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102383#M8045 John_Fleming 2020-11-17T21:04:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102385#M8046 <P>Its kind of unclear, but this seems to be the fixed version in the net-snmp which shows 5.8.1rc1 ?</P><P>&nbsp;</P><P><A href="https://github.com/net-snmp/net-snmp/commit/77f6c60f57dba0aaea5d8ef1dd94bcd0c8e6d205" target="_blank">https://github.com/net-snmp/net-snmp/commit/77f6c60f57dba0aaea5d8ef1dd94bcd0c8e6d205</A></P><P>&nbsp;</P> Tue, 17 Nov 2020 21:16:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102385#M8046 John_Fleming 2020-11-17T21:16:17Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102928#M8100 <P>When we patch an issue in third party code, we don't necessarily rev the version number unless we actually update the relevant codebase to that version.<BR />Specific to this CVE, it appears that this issue requires expert/root on the relevant gateway to exploit.<BR />If you have that kind of access, you can pretty much do anything you want anyway.<BR /><BR /></P> Mon, 23 Nov 2020 04:53:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CVE-2020-15862-Net-SNMP-through-5-7-3-has-Improper-Privilege/m-p/102928#M8100 PhoneBoy 2020-11-23T04:53:27Z