CSIRT-Kabupaten

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 01 October 2026

Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk	Versi Basis	Batas Terdampak	Status Keamanan
Quantum Security Management	R82.20 with no Jumbo Hotfix	—	AFFECTED
Quantum Security Management	R82.10 with Jumbo Hotfix Take 44 or below	—	AFFECTED
Quantum Security Management	R82 with Jumbo Hotfix Take 126 or below	—	AFFECTED
Quantum Security Management	R81.20 with Jumbo Hotfix Take 166 or below	—	AFFECTED
Quantum Security Management	R81.10 (EOS) with Jumbo Hotfix Take 190 or below	—	AFFECTED
Quantum Security Management	R81 (EOS)	—	AFFECTED
Quantum Security Management	R80.40 (EOS)	—	AFFECTED
Quantum Security Management	R80.30 (EOS)	—	AFFECTED
Quantum Security Management	R80.20 (EOS)	—	AFFECTED
Quantum Security Management	R80.10 (EOS)	—	AFFECTED