CVE-2019-8454

CVE-2019-8454 describes a hard-link vulnerability in Check Point Endpoint Security client for Windows before E80.96. A local attacker can exploit this by creating a hard-link to a file written by the client, then impersonating a WPAD server to inject malicious BAT commands that will be executed. With a CVSS score of 7.0 (HIGH), this vulnerability has a local attack vector and high impact on confidentiality, integrity, and availability, but requires high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.