Check Point discloses a critical security vulnerability affecting its Security Management and Log servers that could allow an attacker, without login credentials, to run code with root privileges over the network.
The affected Security Management Server is used to control firewall policies and administrator access, while the Log Server stores and manages logging functions. Check Point releases fixes via its LivePatch update channel, and the company states it has no indication the flaw is being actively exploited at the time of disclosure. Other coverage highlights that the issue enables remote code execution on management infrastructure and emphasizes the seriousness of the root-level impact.
Across outlets, the key points are consistent: the flaw is critical, it impacts Check Point management systems, the attack does not require authentication, and patching is provided through Check Point’s updates. The reporting differs mainly in wording and emphasis—some focus on the root-privilege aspect, while others stress the lack of credentials required to trigger the behavior.
