High severity · published May 28, 2024
CVE-2024-24919
Information disclosure
RansomwareIn wildKEV
8.6
CVSS
100%
EPSS
Yes
On KEV
Description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)100.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed May 30, 2024
Federal remediation dueJun 20, 2024
Ransomware campaign useKnown
Affected products
Which versions
CP
Check Point Quantum Gateway, Spark Gateway and CloudGuard Network · checkpoint
Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. · source: vendor
CN
Cloudguard Network Security · Checkpoint
r80.40; r81; r81.10; r81.20 · source: NVD
QS
Quantum Security Gateway Firmware · Checkpoint
r80.40; r81.20; r81.10; r81 · source: NVD, CISA
QS
Quantum Spark Firmware · Checkpoint
r80.40; r81; r81.10; r80.20 · source: NVD
CN
Cloudguard Network · Checkpoint
r80.40; r81; r81.10; r81.20; r80.40; r81; +10 more · source: CISA
QS
Quantum Spark Appliances · Checkpoint
r80.40; r81; r81.10; r81.20; r80.40; r81; +10 more · source: CISA
QS
Quantum Security Gateways · Check Point
All versions, or not specified · source: KEV
Affected product
CP
Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
checkpoint