Loading
Generated remediation guidance and an executive summary. No account required.
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with write permissions to the user.
Use CWE-114, Checkpoint vendor hub and Capsule Docs Standalone Client product page to widen CVE-2019-8461 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2019-8459 for nearby disclosures in the same product family.