CVE-2023-28130

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Local user may lead to privilege escalation using Gaia Portal hostnames page.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20 CWE-77

Affected software

Vendor	Product	Versions
n/a	Quantum Appliances, Quantum Security Gateways	R81.20 before take 14, R81.10 before take 95, R81 before take 82 R80.40 before take 198
checkpoint	gaia_portal	< take14; >= r81.10, < take82; >= r80.40, < take198

References

http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.htmlThird Party Advisory
http://seclists.org/fulldisclosure/2023/Aug/4Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43Not Applicable
https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/Exploit, Third Party Advisory
https://support.checkpoint.com/results/sk/sk181311Vendor Advisory
http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.htmlThird Party Advisory
http://seclists.org/fulldisclosure/2023/Aug/4Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43Not Applicable
https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/Exploit, Third Party Advisory
https://support.checkpoint.com/results/sk/sk181311Vendor Advisory

Timeline

Published: Jul 26, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-281319.6A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that confi CVE-2023-281337.8Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file CVE-2023-281347.8Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker mus CVE-2023-28146.1A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of t CVE-2023-281407.0An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a mal CVE-2023-281416.3An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to a CVE-2023-281427.0A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers t CVE-2023-281437.0Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of ins CVE-2023-281447.0KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving CVE-2023-281475.5An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access CVE-2023-281487.2A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.CVE-2023-281496.1An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 05.37.42, 5.4 before 0