Endpoint Security / SandBlast Agent E83.11 – Protection for critical DNS vulnerability – SIGRed

[Guy_Avnet]

Hi all,

We are happy to announce the release of Endpoint Security Client E83.11.

E83.11 introduces protection for a critical DNS vulnerability, discovered by Check Point research and released today - CVE-2020-1350.

This is a vulnerability in the Windows DNS server affecting Windows Server versions 2003 to 2019. If exploited, it allows Domain Administrator rights over the server and compromises the entire corporate infrastructure.

This attack got CVSS score 10.0 – indicating the highest possible severity!

SandBlast Agent Endpoint is the first Endpoint Protection which provides full protection against this threat.

For the full details of our investigation into CVE-2020-1350 vulnerability, visit our research blog at https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin:-exploiting-a-17-year-old-...

See sk168034 for more information on the E83.11 release.

B Safe,

Guy A