VULNERABILITY INTELLIGENCE

CVE-2024-24919

CVSS score8.6 HIGH

EPSS probability99.98%

CISA KEVKnown exploited vulnerability

Published2024-05-28

Last modified2026-08-05

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Known Exploited Vulnerability

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Vendor / product: Check Point / Quantum Security Gateways

Description

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Weakness classification

cve@checkpoint.com: CWE-200
nvd@nist.gov: NVD-CWE-noinfo

Primary references

cve@checkpoint.com — Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory