CVE-2020-6020 json
Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.4…
published 2020-09-24 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-27174
- cvss
- 6.4
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 43%
- public exploits
- 0
- none known
Summary
Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.
Patch / fix
- checkpoint ica_management_portal r80.10, r80.20, r80.30, r80.40
Exploit prediction
0.51% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 6.4 | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L |
| NVD | 2.0 | 7.4 | AV:A/AC:L/Au:S/C:C/I:C/A:P |
Affected products
- n/a ICA Management Portal
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
supportcontent.checkpoint.com
/solutions?id=sk142952
vendor-advisory
Sources
- CVE List CVE-2020-6020
- NVD CVE-2020-6020
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.