← Back

CVE-2024-24916

nvd nist
Published: Jun 19, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

Affected (26)

Checkpoint
1 product
Smartconsole
Configuration A
26 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Checkpoint
Smartconsole
Version r81.10 build400
Smartconsole
Version r81.10 build402
Smartconsole
Version r81.10 build404
Smartconsole
Version r81.10 build406
Smartconsole
Version r81.10 build407
Smartconsole
Version r81.10 build409
Smartconsole
Version r81.10 build410
Smartconsole
Version r81.10 build412
Smartconsole
Version r81.10 build413
Smartconsole
Version r81.10 build414
Smartconsole
Version r81.10 build416
Smartconsole
Version r81.10 build417
Smartconsole
Version r81.10 build418
Smartconsole
Version r81.10 build420
Smartconsole
Version r81.10 build423
Smartconsole
Version r81.10 build424
Smartconsole
Version r81.10 build425
Smartconsole
Version r81.20 build640
Smartconsole
Version r81.20 build641
Smartconsole
Version r81.20 build645
Smartconsole
Version r81.20 build646
Smartconsole
Version r81.20 build649
Smartconsole
Version r81.20 build651
Smartconsole
Version r81.20 build653
Smartconsole
Version r81.20 build654
Smartconsole
Version r81.20 build655
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (1)

Source: cve@checkpoint.com
Vendor Advisory

Timeline

No history available yet.