CVE-2022-23744
Check Point Endpoint Security Client E83 through E86 before E86.50 does not protect against a...
Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.
- Record
CVE-2022-23744- CVSS 3.1
- 2.3 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-470
- Updated
- 2026-11-02
CVE List No score
Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.
- Record
CVE-2022-23744- Weakness
- CWE-470
- Updated
- 2026-11-02
EUVDEUVD-2022-28680 No score
Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.
- Record
EUVD-2022-28680- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-29gh-3cpv-qpjp
Check Point Endpoint Security Client E83 through E86 before E86.50 does not protect against a...
Check Point Endpoint Security Client E83 through E86 before E86.50 does not protect against a specific registry modification, and thus allows a local administrator to disable endpoint protection.
- Record
GHSA-29gh-3cpv-qpjp- CVSS 3.1
- 2.3 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-23744 is a low vulnerability (CVSS 2.3) in Checkpoint Endpoint Security, published July 7, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.61%, the 91st percentile. No source names a fixed version.