CVE-2022-23744

Name: CVE-2022-23744
Creator: NVD / NIST
Published: 2022-07-07T16:15:09.063+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

LOWCVSS 2.3/10EPSS 4.35%

Last modified Jun 17, 2026

CVE-2022-23744 is a low-severity vulnerability rated 2.3/10 on the CVSS scale. Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.. EPSS estimates a 4.35% chance of exploitation in the next 30 days.

Description

Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.

Metrics

CVSS 3.1

2.3/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

EPSS Probability

4.35%

90.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-470

Affected Software

Vendor	Product	Versions
Checkpoint	Endpoint Security	e83
Checkpoint	Endpoint Security	e84
Checkpoint	Endpoint Security	e85
Checkpoint	Endpoint Security	e86.10
Checkpoint	Endpoint Security	e86.20
Checkpoint	Endpoint Security	e86.30
Checkpoint	Endpoint Security	e86.40
Checkpoint	Harmony Endpoint	e83
Checkpoint	Harmony Endpoint	e84
Checkpoint	Harmony Endpoint	e85
Checkpoint	Harmony Endpoint	e86.10
Checkpoint	Harmony Endpoint	e86.20
Checkpoint	Harmony Endpoint	e86.30
Checkpoint	Harmony Endpoint	e86.40

References

Timeline

Published: Jul 7, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-23744?

Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.

How severe is CVE-2022-23744?

CVE-2022-23744 has a CVSS score of 2.3/10 (LOW severity). The EPSS model estimates a 4.35% probability of exploitation in the next 30 days.

How do I fix CVE-2022-23744?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-23744?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST