CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure
Attackers can read sensitive information on Check Point Security Gateways if Remote Access or Mobile Access blades are enabled.
- Exploited in the wild
- Since 30 May 2024
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-24919?
CVE-2024-24919 is a high-severity vulnerability in checkpoint Check Point Quantum Gateway, Spark Gateway and CloudGuard Network, published on 28 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Weakness: CWE-200
Which versions are affected by CVE-2024-24919?
It affects 3 products.
Products include Checkpoint Cloudguard Network Security, Checkpoint Quantum Security Gateway Firmware, Checkpoint Quantum Spark Firmware.
How do I fix CVE-2024-24919?
No fix has been published for CVE-2024-24919 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 20 Jun 2024.
Is CVE-2024-24919 being exploited?
Yes. Attackers have exploited CVE-2024-24919 in the wild since at least 30 May 2024, including in ransomware campaigns.
Public exploit code: 1 Metasploit module, 1 Nuclei template and 56 proofs of concept on GitHub.