Check Point Remote Access and Mobile Access VPN Authentication Bypass Vulnerability via IKEv1 Logic Flow Weakness

A logic flow vulnerability has been identified in Check Point's Remote Access and Mobile Access VPN services, specifically within the deprecated IKEv1 key exchange protocol. This vulnerability allows an unauthenticated remote attacker to bypass user authentication and establish a VPN connection without a valid password. The issue arises from improper certificate validation, creating a loophole that can be exploited to gain unauthorized access.

Impact

Exploitation of this vulnerability allows for unauthorized users to establish remote access VPN connections, bypassing authentication requirements.