Check Point Security Management Server and Domain Management Server cpca Process Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the cpca process on Check Point Security Management Server and Domain Management Server. In rare scenarios, this process may exit unexpectedly, leading to VPN and SIC connectivity issues, especially if the Certificate Revocation List (CRL) is not cached on the Security Gateway.

Impact

Exiting of the cpca process, causing a denial-of-service condition that disrupts VPN and SIC connectivity, potentially leading to connectivity issues if the CRL is not cached on the Security Gateway.