This vulnerability arises from a weakness in the certificate validation logic within the deprecated IKEv1 key exchange implementation on Check Point Quantum Security Gateway devices. Specifically, it allows an unauthenticated man-in-the-middle attacker to bypass certificate validation in VPN site-to-site connections that rely on certificate-based authentication. The affected versions include R82.10 with Jumbo Hotfix Take 19 or below, R82 with Jumbo Hotfix Take 103 or below, R81.20 with Jumbo Hotfix Take 141 or below, and versions R81.10, R81, and R80.40. The CVSS v3.1 base score is 7.4, indicating high severity, with impact on confidentiality and integrity but no impact on availability.

Successful exploitation could allow an attacker to intercept or modify traffic traversing the VPN tunnel by bypassing certificate validation in the IKEv1 key exchange. This compromises the confidentiality and integrity of VPN communications between sites. There is no indication that availability is affected. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, organizations should consider disabling the deprecated IKEv1 key exchange protocol if possible, or use alternative secure VPN configurations that do not rely on the vulnerable certificate validation logic. Monitor vendor communications for updates and patches addressing this vulnerability.