Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could let an attacker without login credentials run code as root on those servers over the network. The Security Management Server controls firewall policy and administrator access. Check Point has released a fix via its LivePatch update channel and says it has no indication the flaw has been exploited.