lucky13 vulnerability

[the_rock]

I tried opening the file attached, but no matter how big I make it, cant see anything, sorry : (. Can you try attach it as normal screenshot?

[umar7]

sorry

[the_rock]

Is there CVE for it? I cant find much in inspection settings or IPS protections.

[umar7]

CVE - 2013-0169

[PhoneBoy]

Are you trying to mitigate a found vulnerability on a Check Point device? (If so, what version/JHF level)
Or are you trying to mitigate a found vulnerability on a website protected by a Check Point firewall running Threat Prevention?

In any case, it doesn't seem like a high-severity vulnerability since attackers generally need to be located on the same LAN they are attacking to launch a successful attack.
See: https://crashtest-security.com/prevent-ssl-lucky13/ 

[umar7]

hello

[PhoneBoy · Accepted solution]

Refer to the following SK, which has an official statement on CVE-2013-0169: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
If you need more details, please consult with the TAC.

[the_rock]

To add to what phoneboy said, based on below does not appear its really a vulnerability to be overly concerned about:

https://nvd.nist.gov/vuln/detail/cve-2013-0169

Andy

[G_W_Albrecht]

So what was the final decision here and what was done ?