CVE-2020-6014

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-114 CWE-426

Affected software

Vendor	Product	Versions
n/a	Check Point Endpoint Security Client for Windows	before E83.20

References

https://supportcontent.checkpoint.com/solutions?id=sk168081Release Notes, Vendor Advisory
https://supportcontent.checkpoint.com/solutions?id=sk168081Release Notes, Vendor Advisory

Timeline

Published: Nov 2, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-60155.5Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent th CVE-2020-60169.8Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_Receive CVE-2020-60179.8Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegment CVE-2020-60189.8Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decry CVE-2020-60197.5Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBa CVE-2020-60206.4Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 CVE-2020-60217.8Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repa CVE-2020-60225.5Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware.CVE-2020-60237.8Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware.CVE-2020-60247.8Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 54 CVE-2020-60589.1An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SN CVE-2020-60598.2An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SN