CVE-2014-8951 json
Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Cont…
published 2014-11-16 11 y ago modified 2026-06-17 4 mo ago also EUVD-2014-8778
- cvss
- 7.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.5%
- EPSS 1.5% chance of exploitation in 30 days, percentile 75%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) Anti-Bot, or (6) Anti-Virus blade is used, allows remote attackers to cause a denial of service (fwk0 process crash, core dump, and restart) via a redirect to the UserCheck page.
Exploit prediction
1.55% chance of exploitation in the next 30 days, higher than 75% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
References
-
supportcenter.checkpoint.com
/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100505
vendor-advisory
-
secunia.com
/advisories/58487
third-party-advisory
-
securityfocus.com
/bid/67993
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/98761
vdb-entry
Sources
- CVE List CVE-2014-8951
- NVD CVE-2014-8951
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.