A critical vulnerability in Check Point's VPN has been exploited, allowing attackers to bypass passwords in certain setups. This issue affects Remote Access VPN and Mobile Access deployments using the IKEv1 protocol. The vulnerability is due to a logic flow weakness in certificate validation, enabling unauthenticated remote attackers to gain access. It has a high CVSS score, indicating a significant level of severity. The impacted setups are those configured to use the deprecated IKEv1 key exchange protocol, which Check Point has warned is being actively exploited.

AI summaries can be wrong sometimes—always verify important details using the source article.