ET INFO Check Point FWM/CPMI Unauthenticated Legacy Gui_Client Handshake (SIC DN Disclosure)

7.0.35.0SID: 2071348Rev: 1Enabled5 views
Sourceet/open
Fileemerging-info.rules
CreatedJuly 30, 2026
UpdatedJuly 30, 2026
Classificationprotocol-command-decode
alert tcp any any -> [$HOME_NET,$HTTP_SERVERS] 18190 (msg:"ET INFO Check Point FWM/CPMI Unauthenticated Legacy Gui_Client Handshake (SIC DN Disclosure)"; flow:established,to_server; content:"|59 00 00 00 00 00 00 41|"; depth:8; content:"|00 00 00 0e|CN|3d|Gui_Client|00|"; fast_pattern; within:18; reference:url,www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/; classtype:protocol-command-decode; sid:2071348; rev:1; metadata:attack_target Server, tls_state plaintext, created_at 2026_07_30, deployment Perimeter, confidence High, signature_severity Informational, updated_at 2026_07_30; target:dest_ip;)

References

urlwww.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/

Metadata

attack targetServer
tls stateplaintext
created at2026_07_30
deploymentPerimeter
confidenceHigh
signature severityInformational
updated at2026_07_30

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!