Endpoint Security / SandBlast Agent E83.11 – Protection for critical DNS vulnerability – SIGRed

Guy_Avnet — Tue, 14 Jul 2020 19:23:22 GMT

Hi all,

We are happy to announce the release of Endpoint Security Client E83.11.

E83.11 introduces protection for a critical DNS vulnerability, discovered by Check Point research and released today - CVE-2020-1350.

This is a vulnerability in the Windows DNS server affecting Windows Server versions 2003 to 2019. If exploited, it allows Domain Administrator rights over the server and compromises the entire corporate infrastructure.

This attack got CVSS score 10.0 – indicating the highest possible severity!

SandBlast Agent Endpoint is the first Endpoint Protection which provides full protection against this threat.

For the full details of our investigation into CVE-2020-1350 vulnerability, visit our research blog at https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin:-exploiting-a-17-year-old-bug-in-windows-dns-servers/

See sk168034 for more information on the E83.11 release.

B Safe,

Guy A

topic Endpoint Security / SandBlast Agent E83.11 – Protection for critical DNS vulnerability – SIGRed in Endpoint

Endpoint Security / SandBlast Agent E83.11 – Protection for critical DNS vulnerability – SIGRed