Check Point Discloses Two Critical VPN Certificate Vulnerabilities Enabling Unauthenticated RCE

Check Point patched two critical vulnerabilities in the handling of VPN certificates in its firewall and management products. The company says both could allow an unauthenticated remote attacker to run code under specific conditions that it has not described. Check Point says it found the flaws itself and has no indication that either was used in an attack.