CVE-2004-2679: Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive informat...

Security readout for executives and security teams

This old Check Point Firewall-1 issue can disclose firewall version and related details through IKE responses. The exposed information does not appear to give direct control of the firewall, but it can help attackers identify legacy perimeter defenses and choose follow-on attacks. Exposure is most likely where legacy Check Point Firewall-1 VPN or IKE services remain reachable from untrusted networks. Modern environments are unlikely affected unless old Firewall-1 deployments are still operating. Prioritize as a legacy perimeter hygiene issue. It is not evidenced as actively exploited in the provided sources, but any internet-exposed unsupported firewall deserves timely review and replacement planning. Mitigation focus: Inventory any Check Point Firewall-1 4.1 through NG AI R55 systems.; Check current vendor guidance for supported upgrade or hardening options.; Restrict IKE access to trusted peers wherever operationally possible..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.