CVE-2024-24915

Published: Jun 29, 2025Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

Affected (38)

Products: Checkpoint: Smartconsole

Checkpoint

1 product

Smartconsole

Configuration A

38 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Checkpoint Smartconsole	Version r81.10 build400
Checkpoint Smartconsole	Version r81.10 build402
Checkpoint Smartconsole	Version r81.10 build404
Checkpoint Smartconsole	Version r81.10 build406
Checkpoint Smartconsole	Version r81.10 build407
Checkpoint Smartconsole	Version r81.10 build409
Checkpoint Smartconsole	Version r81.10 build410
Checkpoint Smartconsole	Version r81.10 build412
Checkpoint Smartconsole	Version r81.10 build413
Checkpoint Smartconsole	Version r81.10 build414
Checkpoint Smartconsole	Version r81.10 build416
Checkpoint Smartconsole	Version r81.10 build417
Checkpoint Smartconsole	Version r81.10 build418
Checkpoint Smartconsole	Version r81.10 build420
Checkpoint Smartconsole	Version r81.10 build423
Checkpoint Smartconsole	Version r81.10 build424
Checkpoint Smartconsole	Version r81.10 build425
Checkpoint Smartconsole	Version r81.10 build426
Checkpoint Smartconsole	Version r81.10 build427
Checkpoint Smartconsole	Version r81.10 build428
Checkpoint Smartconsole	Version r81.10 build429
Checkpoint Smartconsole	Version r81.20 build640
Checkpoint Smartconsole	Version r81.20 build641
Checkpoint Smartconsole	Version r81.20 build645
Checkpoint Smartconsole	Version r81.20 build646
Checkpoint Smartconsole	Version r81.20 build649
Checkpoint Smartconsole	Version r81.20 build651
Checkpoint Smartconsole	Version r81.20 build653
Checkpoint Smartconsole	Version r81.20 build654
Checkpoint Smartconsole	Version r81.20 build655
Checkpoint Smartconsole	Version r81.20 build656
Checkpoint Smartconsole	Version r81.20 build658
Checkpoint Smartconsole	Version r81.20 build659
Checkpoint Smartconsole	Version r81.20 build660
Checkpoint Smartconsole	Version r81.20 build661
Checkpoint Smartconsole	Version r81.20 build663
Checkpoint Smartconsole	Version r82 build1051
Checkpoint Smartconsole	Version r82 build1053

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

CWE-316

Cleartext Storage of Sensitive Information in Memory

The product stores sensitive information in cleartext in memory.

References (1)

https://support.checkpoint.com/results/sk/sk183545

Source: cve@checkpoint.com

Vendor Advisory

Timeline

No history available yet.