Re: CVE-2020-0601

May the 4th (+4)
Roadmap Session and Use Cases for
Cloud Security, SASE, and Email Security

SASE Masters:
Deploying Harmony SASE for a 6,000-Strong Workforce
in a Single Weekend

Paradigm Shifts: Adventures Unleashed!
Capture Your Adventure for a Chance to WIN!

Join the Photo Contest!

Mastering Compliance
Unveiling the power of Compliance Blade

WATCH NOW

CPX 2024 Content
is Here!

Get What You Need

Harmony SaaS
The most advanced prevention
for SaaS-based threats

LEARN MORE

CheckMates Go:
CPX 2024 Recap

LISTEN NOW

Create a Post

Any ideas when CP is going to release a protection for CVE-2020-0601? It seems that it should be doing this already, but would like to verify!

3 Replies

In general, to have an IPS signature, there would have to be a known exploit for the bug that can be triggered over the network and/or enough details provided about the vulnerability to write a signature.
To the best of my knowledge, neither of these things have happened...yet.

So, here it is: https://github.com/ollypwn/cve-2020-0601

We should have a signature now.
Threat Emulation has been blocking it for the last few days.
https://www.checkpoint.com/defense/advisories/public/2020/cpai-2020-0019.html/