AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-8454

HIGH · CVSS 7 EPSS 0.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-04-29 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.0. It affects Windows.

CVE
CVE-2019-8454
Severity
HIGH
CVSS
7
EPSS
0.33%
Windows

Original NVD Description

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.

Related CVEs

Other vulnerabilities affecting the same vendor(s)