CVE-2024-24910

Published: Apr 18, 2024Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.

Affected (2)

Products: Checkpoint: Identity Agent, Zonealarm Extreme Security Nextgen

2 products

Zonealarm Extreme Security Nextgen

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Checkpoint Identity Agent	Up to r81.070.0000
Checkpoint Zonealarm Extreme Security Nextgen	Before 4.2.712

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://support.checkpoint.com/results/sk/sk182219

Source: cve@checkpoint.com

Vendor Advisory

https://support.checkpoint.com/results/sk/sk182219

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.