CVE-2013-5636

Published Nov 30, 2013

Last updated a month ago

Overview

Description
Unlock.exe in Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not associate password failures with a device ID, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by overwriting DVREM.EPM with a copy of itself after each few password guesses.
Source
cve@mitre.org
NVD status
Deferred

Risk scores

CVSS 2.0

Type
Primary
Base score
3.3
Impact score
4.9
Exploitability score
3.4
Vector string
AV:L/AC:M/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-255

Social media

Hype score
Not currently trending

Configurations