Improper privilege management in ZoneAlarm.
Priority LOW 34CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.
Summary
Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory allow a local attacker the ability to execute an arbitrary file write, leading to execution of code as local system, in ZoneAlarm versions before v15.8.211.192119
Why it matters now
EPSS 0.00419 36th percentileScored 2026-11-07
Fix Fixed ZoneAlarm.: v15.8.211.192119
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | ZoneAlarm. | before v15.8.211.192119 | v15.8.211.192119 | Patch available | CNA |
- ZoneAlarm. Vendor— Affected before v15.8.211.192119 Fixed in v15.8.211.192119 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:checkpoint:zonealarm:*:*:*:*:*:*:*:* | before 15.8.211.192119 | Vulnerable | Check Point |
- cpe:2.3:a:checkpoint:zonealarm:*:*:*:*:*:*:*:* Versions before 15.8.211.192119 Vulnerable ·Check Point
Remediation
- Fix · CNA ZoneAlarm. Fixed in v15.8.211.192119
Timeline
- 2026-10-02 Threatist record created from CVE-2022-23743
- 2026-10-03 Alias added: GHSA-gg2c-h853-78h4
References
More Check Point Zonealarm vulnerabilities
- TI-2022-20008 Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to… CVSS 3.1HIGH 8.8
- TI-2019-06068 Link following in Check Point ZoneAlarm CVSS 3.1HIGH 7.8
- TI-2020-04923 Untrusted search path in Check Point ZoneAlarm CVSS 3.1HIGH 7.8
- TI-2018-06338 Incorrect authorization in Check Point Software Technologies Ltd. ZoneAlarm CVSS 3.0HIGH 7.8
- TI-2008-06697 Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and… CVSS 2.0MEDIUM 6.9
- TI-2007-04081 vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local… CVSS 2.0HIGH 7.2
Sources
- CVE-2022-23743 · CVE Program
- CVE-2022-23743 · NVD
- FIRST EPSS
- GHSA-gg2c-h853-78h4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences