← Vulnerability feed

Vulnerability record · CVE-2011-1827 · published 5 October 2011

CVE-2011-1827: Checkpoint connectra ngx vulnerability

Checkpoint · Connectra Ngx

Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX control or (2) Java applet.

9.3 CVSS 2.0 High EPSS 4.5% · top 8.8%
9.3CVSS 2.0 base score
4.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectra, and VSX, allow remote attackers to execute arbitrary code via vectors involving a (1) ActiveX control or (2) Java applet.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/47695
http://www.vupen.com/english/advisories/2011/1162 Vendor Advisory
https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk62410
https://www.sec-consult.com/en/advisories.html#a68
http://www.securityfocus.com/bid/47695
http://www.vupen.com/english/advisories/2011/1162 Vendor Advisory
https://supportcenter.checkpoint.com/supportcenter/portal?solutionid=sk62410
https://www.sec-consult.com/en/advisories.html#a68

Track CVE-2011-1827 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0469Checkpoint firewall-1 vulnerabilityBuffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG …EPSS 5.0%10.0CVE-2004-0040Checkpoint firewall-1 vulnerabilityStack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows…EPSS 7.6%7.8CVE-2005-3673Checkpoint check point vulnerabilityThe Internet Key Exchange version 1 (IKEv1) implementation in Check Point products allows remote attackers to cause a denial of service via certain c…EPSS 4.9%7.5CVE-2007-0471Checkpoint connectra ngx permissions and access controls vulnerabilitysre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and po…EPSS 2.7%7.5CVE-2005-2889Checkpoint connectra ngx vulnerabilityCheck Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypass intend…EPSS 2.3%7.5CVE-2004-0079Cisco firewall services module null pointer dereference vulnerabilityThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) vi…EPSS 9.5%7.5CVE-2004-0699Checkpoint firewall-1 vulnerabilityHeap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers …EPSS 5.9%7.5CVE-2001-1176Checkpoint firewall-1 vulnerabilityFormat string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via fo…EPSS 2.8%

Source: NIST National Vulnerability Database (record CVE-2011-1827), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.