description: Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with write permissions to the user.
problem types: CWE-114: Process Control
affected:
{
product: Check Point Endpoint Security Initial Client for Windows
vendor: n/a
versions:
status: affected, version: before version E81.30
}