CVE-2024-24919

Published: May 28, 2024Modified: Jun 17, 2026CISA KEV

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Affected (12)

Products: Checkpoint: Quantum Spark Firmware, Quantum Security Gateway Firmware, Cloudguard Network Security

Checkpoint

3 products

Quantum Spark Firmware

Quantum Security Gateway Firmware

Cloudguard Network Security

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Quantum Spark Firmware	Version r80.40

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Quantum Spark Firmware	Version r81

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Quantum Security Gateway Firmware	Version r80.40

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Cloudguard Network Security	Version r80.40
Checkpoint Cloudguard Network Security	Version r81.10
Checkpoint Cloudguard Network Security	Version r81.20
Checkpoint Cloudguard Network Security	Version r81

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Quantum Security Gateway Firmware	Version r81.20

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Quantum Security Gateway Firmware	Version r81.10

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Checkpoint Quantum Security Gateway Firmware	Version r81

Running on/with	Platform Versions
Checkpoint Quantum Security Gateway	All versions

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Quantum Spark Firmware	Version r81.10

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Checkpoint Quantum Spark Firmware	Version r80.20

Running on/with	Platform Versions
Checkpoint Quantum Spark	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://support.checkpoint.com/results/sk/sk182336

Source: cve@checkpoint.com

MitigationPatchVendor Advisory

https://support.checkpoint.com/results/sk/sk182336

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationPatchVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Third Party Advisory

Timeline

No history available yet.