CVE-2024-24919: high-severity vulnerability in checkpoint Check Point Quantum Gateway, Spark…
Information disclosure
Published · Updated
Follow this CVE+ Monitor Quantum Security Gateways+ Monitor Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
100Vexday Risk Score
Patch now. It under exploitation confirmed by CISA, has an official Brazilian government alert and has a working public exploit.
ssvc Actcvss 8.6epss 100%
from disclosure to weapon2 days
Published on NVDMay 28
1st PoC+2d
CISA KEV+2d
Official alert in Brazil
Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.
- CTIR Gov · ALERTA 08/2024Vulnerabilidade no Check Point Security Gatewayread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
Action required by CISAfederal deadline: 2024-06-20
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
In short
A vulnerability in Check Point Security Gateways allows attackers to read sensitive information if the gateway is exposed to the internet with remote access VPN or Mobile Access enabled. This can leak confidential data that should be protected.
Technical detail
Information disclosure vulnerability in Check Point Security Gateways (CWE-200) affecting systems with remote Access VPN or Mobile Access Software Blades exposed to the internet. An attacker with network access can retrieve sensitive information without authentication. Requires the vulnerable Blade to be enabled on an internet-facing gateway.
Summary generated and translated by AI from the official description.
The full analysis of this CVE is available in Portuguese →
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
public PoCs found — 118
githubgithub.com/seed1337/CVE-2024-24919-POC★ 47githubgithub.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner★ 31githubgithub.com/RevoltSecurities/CVE-2024-24919★ 25githubgithub.com/GoatSecurity/CVE-2024-24919★ 20githubgithub.com/un9nplayer/CVE-2024-24919★ 16githubgithub.com/LucasKatashi/CVE-2024-24919★ 12githubgithub.com/0nin0hanz0/CVE-2024-24919-PoC★ 11githubgithub.com/verylazytech/CVE-2024-24919★ 9githubgithub.com/c3rrberu5/CVE-2024-24919★ 7githubgithub.com/geniuszly/CVE-2024-24919★ 6githubgithub.com/smackerdodi/CVE-2024-24919-nuclei-templater★ 5githubgithub.com/emanueldosreis/CVE-2024-24919★ 5githubgithub.com/zam89/CVE-2024-24919★ 4githubgithub.com/GuayoyoCyber/CVE-2024-24919★ 4githubgithub.com/GlobalsecureAcademy/CVE-2024-24919★ 3githubgithub.com/Rug4lo/CVE-2024-24919-Exploit★ 3githubgithub.com/Bytenull00/CVE-2024-24919★ 3githubgithub.com/bigb0x/CVE-2024-24919-Sniper★ 3githubgithub.com/NingXin2002/Check-Point_poc★ 2githubgithub.com/Cappricio-Securities/CVE-2024-24919★ 2githubgithub.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN★ 2githubgithub.com/Praison001/CVE-2024-24919-Check-Point-Remote-Access-VPN★ 1githubgithub.com/0xans/CVE-2024-24919★ 1githubgithub.com/hashdr1ft/SOC_287★ 1githubgithub.com/starlox0/CVE-2024-24919-POC★ 1githubgithub.com/SalehLardhi/CVE-2024-24919★ 1githubgithub.com/satriarizka/CVE-2024-24919★ 1githubgithub.com/intel365/CVE-2024-24919★ 1githubgithub.com/0xYumeko/CVE-2024-24919★ 1githubgithub.com/birdlex/cve-2024-24919-checker★ 1githubgithub.com/nexblade12/CVE-2024-24919★ 1githubgithub.com/fernandobortotti/CVE-2024-24919★ 1githubgithub.com/funixone/CVE-2024-24919---Exploit-Script★ 1githubgithub.com/r4p3c4/CVE-2024-24919-Checkpoint-Firewall-VPN-Check★ 1githubgithub.com/mr-kasim-mehar/CVE-2024-24919-Exploit★ 1githubgithub.com/Vulnpire/CVE-2024-24919★ 0githubgithub.com/hendprw/CVE-2024-24919★ 0githubgithub.com/am-eid/CVE-2024-24919★ 0githubgithub.com/P3wc0/CVE-2024-24919★ 0githubgithub.com/0xkalawy/CVE-2024-24919★ 0githubgithub.com/nicolvsrlr27/CVE-2024-24919★ 0githubgithub.com/YN1337/CVE-2024-24919★ 0githubgithub.com/J4F9S5D2Q7/CVE-2024-24919-CHECKPOINT★ 0githubgithub.com/Expl0itD0g/CVE-2024-24919---Poc★ 0githubgithub.com/Tim-Hoekstra/CVE-2024-24919★ 0githubgithub.com/nullcult/CVE-2024-24919-Exploit★ 0githubgithub.com/satchhacker/cve-2024-24919★ 0githubgithub.com/H3KEY/CVE-2024-24919★ 0githubgithub.com/Jutrm/cve-2024-24919★ 0githubgithub.com/LuisMateo1/Arbitrary-File-Read-CVE-2024-24919★ 0githubgithub.com/AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-★ 0githubgithub.com/sar-3mar/CVE-2024-24919_POC★ 0githubgithub.com/SpiX-7/CVE-2024-24919-POC★ 0githubgithub.com/ejaboz/cve-2024-24919★ 0githubgithub.com/CyprianAtsyor/CVE-2024-24919-Incident-Report.md★ 0githubgithub.com/CyberBibs/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-★ 0githubgithub.com/MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-Exploitation★ 0vulncheckvulncheck.com/xdb/8efe86b85385unverifiedvulncheckvulncheck.com/xdb/5929a3c6eb8aunverifiedvulncheckvulncheck.com/xdb/f0ef41012170unverifiedvulncheckvulncheck.com/xdb/72bb189bb271unverifiedvulncheckvulncheck.com/xdb/6d752fbb937cunverifiedvulncheckvulncheck.com/xdb/c4b3fdf4a5a0unverifiedvulncheckvulncheck.com/xdb/e82839fb2a3eunverifiedvulncheckvulncheck.com/xdb/51cb208786d3unverifiedvulncheckvulncheck.com/xdb/a3a8703af707unverifiedvulncheckvulncheck.com/xdb/ab8c1e3e3646unverifiedvulncheckvulncheck.com/xdb/f22cf8e4cd18unverifiedvulncheckvulncheck.com/xdb/d71f8b001a77unverifiedvulncheckvulncheck.com/xdb/1913565768f5unverifiedvulncheckvulncheck.com/xdb/1b7c709c6360unverifiedvulncheckvulncheck.com/xdb/f36c4553046bunverifiedvulncheckvulncheck.com/xdb/4b560c5574a3unverifiedvulncheckvulncheck.com/xdb/a709114311f6unverifiedvulncheckvulncheck.com/xdb/9e2e6fb95473unverifiedvulncheckvulncheck.com/xdb/a1c0ae86d246unverifiedvulncheckvulncheck.com/xdb/ac33617aef51unverifiedvulncheckvulncheck.com/xdb/092dd3ba67bdunverifiedvulncheckvulncheck.com/xdb/0c9c869a08d3unverifiedvulncheckvulncheck.com/xdb/70994ec0c5d3unverifiedvulncheckvulncheck.com/xdb/de808000c9d3unverifiedvulncheckvulncheck.com/xdb/0a8cb6d49711unverifiedvulncheckvulncheck.com/xdb/445c6eae61ddunverifiedvulncheckvulncheck.com/xdb/6b522b401a39unverifiedvulncheckvulncheck.com/xdb/6243e133d9eaunverifiedvulncheckvulncheck.com/xdb/50e7b76bdc9funverifiedvulncheckvulncheck.com/xdb/de9876a305c5unverifiedvulncheckvulncheck.com/xdb/6c1e9ba4333aunverifiedvulncheckvulncheck.com/xdb/3e1daa797bf9unverifiedvulncheckvulncheck.com/xdb/41aac64174f4unverifiedvulncheckvulncheck.com/xdb/b21251c38b61unverifiedvulncheckvulncheck.com/xdb/30fab5d1e270unverifiedvulncheckvulncheck.com/xdb/73a9276dba9funverifiedvulncheckvulncheck.com/xdb/f6944d96f1ecunverifiedvulncheckvulncheck.com/xdb/9d791cc169bfunverifiedvulncheckvulncheck.com/xdb/9a3fb12624b4unverifiedvulncheckvulncheck.com/xdb/47b5fb744bf8unverifiedvulncheckvulncheck.com/xdb/68cc499283d4unverifiedvulncheckvulncheck.com/xdb/28effee549e0unverifiedvulncheckvulncheck.com/xdb/b4d18c6bf06eunverifiedvulncheckvulncheck.com/xdb/91991bb01e09unverifiedvulncheckvulncheck.com/xdb/307191685e1funverifiedvulncheckvulncheck.com/xdb/4cae1121ac6dunverifiedvulncheckvulncheck.com/xdb/f4c58c27ce8dunverifiedvulncheckvulncheck.com/xdb/2df82d697c50unverifiedvulncheckvulncheck.com/xdb/6334b1c021a5unverifiedvulncheckvulncheck.com/xdb/8ee8515985caunverifiedvulncheckvulncheck.com/xdb/6f9dd13e5f7eunverifiedvulncheckvulncheck.com/xdb/c74ebcca3b51unverifiedvulncheckvulncheck.com/xdb/73f0d5b75fbdunverifiedvulncheckvulncheck.com/xdb/4a6e5f342e96unverifiedvulncheckvulncheck.com/xdb/35b00d2a87ccunverifiedvulncheckvulncheck.com/xdb/a16b5b242987unverifiedvulncheckvulncheck.com/xdb/f776bcf16de3unverifiedcve_referencewww.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/unverifiedvulncheckvulncheck.com/xdb/ba88bd25d4a7unverifiedvulncheckvulncheck.com/xdb/320ad058f801unverifiedvulncheckvulncheck.com/xdb/cb400c008cb4unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.