Local Privilege Escalation in Check Point ZoneAlarm Version 15.3.064.17729 and Below

CVE-2018-8790 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.

Learn more about our User Device Pen Test.