topic Re: CVE list per device in General Topics

CVE list per device

Bart_Leysen — Thu, 06 Jun 2019 16:51:34 GMT

We are looking for a report per device for possible vulnerabilities (CVE list). With this i mean vulnerabilities for the checkpoint appliance itself.

Is there a checkpoint tool that could generate this kind of report? We have over 200 checkpoint appliances.

PhoneBoy — Thu, 06 Jun 2019 18:41:34 GMT

The number of CVEs that have been exploitable on our appliances over the last few years is pretty small and we tend to patch those fairly quickly, particularly when compared to the competition.
While we don't offer the kind of report you're looking for, you can monitor our Security Alerts in SupportCenter, which provide responses to relevant CVEs:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsecurityalerts=&view=SixMonths#type=Security+Alerts

Vladimir — Thu, 06 Jun 2019 20:14:59 GMT

Funny enough, you can look up some of it here:

Chose "Non-Cisco Products" select "Check Point and the CP product.

or here:

PhoneBoy — Thu, 06 Jun 2019 20:16:45 GMT

That doesn't tell you which of your appliances are vulnerable to said CVEs, of course.
But yes, the CVE Details site is very useful.

Bart_Leysen — Fri, 07 Jun 2019 06:24:55 GMT

Thank you all, i at least know where to find these things.