> Source: [sk106060](https://support.checkpoint.com/results/sk/sk106060)

# sk106060 - Check Point response to CVE-2015-3456 (VENOM)

| Property | Value |
|----------|-------|
| Solution ID | sk106060 |
| Date Created | 2015-05-13 |
| Last Modified | 2021-06-01 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- A vulnerability in the virtual floppy drive code was discovered ([CVE-2015-3456](http://venom.crowdstrike.com)).

## Solution

The relevant fix for Threat Emulation gateway is already available and has been integrated in Threat Emulation engine version **24.990000010** (refer to [sk95235](http://supportcontent.checkpoint.com/solutions?id=sk95235)).  
Any Threat Emulation engine version that is lower than 24.990000010 is vulnerable to CVE-2015-3456.

*Offline* update packages are already available in [sk92509 - Offline updates for Threat Emulation images and engine](http://supportcontent.checkpoint.com/solutions?id=sk92509).

*Automatic* gradual update to all Threat Emulation customers will be released during the week of May 17-22, 2015. All customers with active Threat Emulation online updates (by default, online updates are enabled) will get it in this time frame.

|--------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Check the current version of   | Instructions                                                                                                                                                                                                                                                                                                                                                                               |
| Threat Emulation Engine Update | 1. Connect to command line on Threat Emulation Gateway. 2. Check the current version: * *Either* log in to Clish and run this command: ***HostName\> tecli advanced engine version*** * *Or* log in to Expert mode and run either *one* of these commands: * ***\[Expert@HostName:0\]# tecli advanced engine version*** * ***\[Expert@HostName:0\]# cat $FWDIR/teCurrentPack/te_ver.ini*** |
| Threat Emulation Image         | 1. Connect to command line on Threat Emulation Gateway. 2. Log in to Expert mode. 3. Check the current version: ***\[Expert@HostName\]# tecli show downloads images***                                                                                                                                                                                                                     |

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content