Check Point VPN IKEv1 Certificate Validation Bypass Vulnerability Allowing Traffic Interception or Modification

A vulnerability exists in the certificate validation process of the outdated IKEv1 key exchange, potentially allowing an unauthenticated attacker to act as a man-in-the-middle. This could enable the attacker to bypass certificate validation in VPN site-to-site connections that rely on certificate-based authentication. Exploitation of this vulnerability could lead to the interception or alteration of traffic passing through the VPN tunnel.

Impact

Exploitation could allow for the interception or modification of VPN traffic.