This vulnerability arises from a weakness in the certificate validation logic within the deprecated IKEv1 key exchange protocol on Check Point Quantum Security Gateway devices. An unauthenticated attacker positioned as a man-in-the-middle could exploit this flaw to bypass certificate validation in VPN site-to-site connections that rely on certificate-based authentication. Successful exploitation would allow the attacker to intercept or modify traffic passing through the VPN tunnel. The CVSS 3.1 base score is 7.4 (High), reflecting network attack vector, high impact on confidentiality and integrity, and no privileges or user interaction required. Affected versions include 81.10, R81, 81.20, 82.10 and earlier. There is no vendor advisory or patch information currently available, and the remediation level is unknown.

An attacker who can position themselves as a man-in-the-middle on the network could bypass certificate validation in VPN site-to-site connections using certificate-based authentication. This could lead to interception or modification of sensitive traffic traversing the VPN tunnel, compromising confidentiality and integrity of communications. Availability is not impacted. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects the deprecated IKEv1 key exchange, consider disabling IKEv1 and migrating to IKEv2 if possible as a temporary mitigation. Monitor vendor communications for official fixes or workarounds.