CVE-2020-6024

CVE-2020-6024 describes a local privilege escalation vulnerability affecting Check Point SmartConsole versions prior to specific builds across R80.10, R80.20, R80.30, R80.40, and R81. The vulnerability stems from the SmartConsole running executables from a directory writable by all authenticated users. With a CVSS score of 7.8 (High), this flaw allows a low-privileged local attacker to achieve high impact on confidentiality, integrity, and availability with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.