topic Re: Checkpoints exposure to CVE-2020-2035 and CVE-2020-15936 (SNIcat) in General Topics

Checkpoints exposure to CVE-2020-2035 and CVE-2020-15936 (SNIcat)

Johan_Hillstrom — Wed, 12 Aug 2020 11:22:58 GMT

Looking for more information regarding Checkpoint products exposure to recent vulnerabilities (CVE-2020-2035 and CVE-2020-15936)

The vulnerability allows to exfiltrate data covertly using anomalous SNI payloads.

The researchers tested against Palo Alto, Fortinet and F5 and found all of them to be vulnerable.

_Val_ — Wed, 12 Aug 2020 13:11:48 GMT

We are looking into this. Once the official answer is ready, we will let everyone know.

uf0 — Mon, 30 Nov 2020 10:39:43 GMT

Hello, do you have any update on this?

_Val_ — Mon, 30 Nov 2020 11:31:26 GMT

We have protections with SandBlast Agent and Threat Emulation for SNIcat. Relevant protections are:

_Val_ — Thu, 03 Dec 2020 08:45:53 GMT

Here we go: sk170795

Ethan_Schorer — Thu, 03 Dec 2020 08:46:20 GMT

Hi, We just published the following Security Alert:

https://supportcontent.checkpoint.com/solutions?id=sk170795

TL;DR - we are not vulnerable and as @_Val_ wrote - we have protections in all sorts of blades.

Johan_Hillstrom — Thu, 03 Dec 2020 21:46:27 GMT

Excellent job, Check Point team.
Better than most competitors.

Johan_Hillstrom — Thu, 03 Dec 2020 21:57:31 GMT

I also applaud your persistence following up this issue.

Absolutely spotless, hat's off !

Keep up the good work in this great community.