topic Re: Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security? in Endpoint

Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security?

jcritch — Wed, 01 Jun 2022 17:36:41 GMT

Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security? We are on V-E86.20 (86.20.0119)

Re: Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security?

ErikTorres — Fri, 03 Jun 2022 21:08:08 GMT

Hello,

I don't know if any CP Endopint has mitigation for this vulnerability, but Check Point IPS has the signature for this vulnerability to prevent it.

Don't forget to update your IPS signatures.

Regards,

Re: Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security?

Chris_Atkinson — Sat, 04 Jun 2022 01:26:14 GMT

Please see: Protecting against 'Follina' vulnerability

Refer also:

https://blog.checkpoint.com/2022/05/31/follina-zero-day-vulnerability-in-microsoft-office-check-point-customers-remain-protected/

Re: Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security?

jcritch — Mon, 06 Jun 2022 13:34:53 GMT

We do not have the Checkpoint firewall and do not have the Checkpoint IPS. The Endpoint Security and full drive encryption products are all the Checkpoint things we have.

Re: Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security?

jcritch — Mon, 06 Jun 2022 13:55:18 GMT

We don't have any product that displays its' product name as 'Harmony'. We have the product that displays as Checkpoint 'Endpoint Security' and we have a Checkpoint full disk encryption product. We do not have the Checkpoint firewall product.

Re: Is CVE-2022-30190 detected or blocked by CheckPoint Endpoint Security?

PhoneBoy — Mon, 06 Jun 2022 13:59:20 GMT

Endpoint Security is the previous name for Harmony Endpoint, which actually contains a number of components which may or may not be deployed and/or licensed in your case.
You're probably not running the most recent version of Harmony Endpoint if you're not seeing that name anywhere.

See the screenshot from the video showing how Harmony Endpoint protects you showing the components enabled/installed and the version (E86.40).
The video comes from the blog post referenced above and the screenshot links to the video.