CVE-2024-24919: fallo de gravedad alta en checkpoint Check Point Quantum Gateway, Spark…
Information disclosure
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear Quantum Security Gateways+ Monitorear Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA, tiene alerta oficial del gobierno de Brasil y tiene exploit funcional público.
ssvc Actcvss 8.6epss 100%
de la publicación al arma2 días
Publicada en NVD28 may
1ª PoC+2d
CISA KEV+2d
Alerta oficial en Brasil
El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.
- CTIR Gov · ALERTA 08/2024Vulnerabilidade no Check Point Security Gatewayleer en gov.br ↗
Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
Acción exigida por CISAplazo federal: 2024-06-20
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
En resumen
Una vulnerabilidad en Check Point Security Gateways permite que atacantes lean información sensible si la puerta de enlace está expuesta en internet con VPN de acceso remoto o Mobile Access habilitado. Esto puede filtrar datos confidenciales que deberían estar protegidos.
Detalle técnico
Vulnerabilidad de divulgación de información (CWE-200) en Check Point Security Gateways que afecta sistemas con remote Access VPN o Mobile Access Software Blades expuestos a internet. Un atacante con acceso de red puede recuperar información sensible sin autenticación. Requiere que la Blade vulnerable esté habilitada en una puerta de enlace expuesta a internet.
Resumen generado y traducido por IA a partir de la descripción oficial.
El análisis completo de esta CVE está disponible en portugués →
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
PoCs públicas encontradas — 118
githubgithub.com/seed1337/CVE-2024-24919-POC★ 47githubgithub.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner★ 31githubgithub.com/RevoltSecurities/CVE-2024-24919★ 25githubgithub.com/GoatSecurity/CVE-2024-24919★ 20githubgithub.com/un9nplayer/CVE-2024-24919★ 16githubgithub.com/LucasKatashi/CVE-2024-24919★ 12githubgithub.com/0nin0hanz0/CVE-2024-24919-PoC★ 11githubgithub.com/verylazytech/CVE-2024-24919★ 9githubgithub.com/c3rrberu5/CVE-2024-24919★ 7githubgithub.com/geniuszly/CVE-2024-24919★ 6githubgithub.com/smackerdodi/CVE-2024-24919-nuclei-templater★ 5githubgithub.com/emanueldosreis/CVE-2024-24919★ 5githubgithub.com/zam89/CVE-2024-24919★ 4githubgithub.com/GuayoyoCyber/CVE-2024-24919★ 4githubgithub.com/GlobalsecureAcademy/CVE-2024-24919★ 3githubgithub.com/Rug4lo/CVE-2024-24919-Exploit★ 3githubgithub.com/Bytenull00/CVE-2024-24919★ 3githubgithub.com/bigb0x/CVE-2024-24919-Sniper★ 3githubgithub.com/NingXin2002/Check-Point_poc★ 2githubgithub.com/Cappricio-Securities/CVE-2024-24919★ 2githubgithub.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN★ 2githubgithub.com/Praison001/CVE-2024-24919-Check-Point-Remote-Access-VPN★ 1githubgithub.com/0xans/CVE-2024-24919★ 1githubgithub.com/hashdr1ft/SOC_287★ 1githubgithub.com/starlox0/CVE-2024-24919-POC★ 1githubgithub.com/SalehLardhi/CVE-2024-24919★ 1githubgithub.com/satriarizka/CVE-2024-24919★ 1githubgithub.com/intel365/CVE-2024-24919★ 1githubgithub.com/0xYumeko/CVE-2024-24919★ 1githubgithub.com/birdlex/cve-2024-24919-checker★ 1githubgithub.com/nexblade12/CVE-2024-24919★ 1githubgithub.com/fernandobortotti/CVE-2024-24919★ 1githubgithub.com/funixone/CVE-2024-24919---Exploit-Script★ 1githubgithub.com/r4p3c4/CVE-2024-24919-Checkpoint-Firewall-VPN-Check★ 1githubgithub.com/mr-kasim-mehar/CVE-2024-24919-Exploit★ 1githubgithub.com/Vulnpire/CVE-2024-24919★ 0githubgithub.com/hendprw/CVE-2024-24919★ 0githubgithub.com/am-eid/CVE-2024-24919★ 0githubgithub.com/P3wc0/CVE-2024-24919★ 0githubgithub.com/0xkalawy/CVE-2024-24919★ 0githubgithub.com/nicolvsrlr27/CVE-2024-24919★ 0githubgithub.com/YN1337/CVE-2024-24919★ 0githubgithub.com/J4F9S5D2Q7/CVE-2024-24919-CHECKPOINT★ 0githubgithub.com/Expl0itD0g/CVE-2024-24919---Poc★ 0githubgithub.com/Tim-Hoekstra/CVE-2024-24919★ 0githubgithub.com/nullcult/CVE-2024-24919-Exploit★ 0githubgithub.com/satchhacker/cve-2024-24919★ 0githubgithub.com/H3KEY/CVE-2024-24919★ 0githubgithub.com/Jutrm/cve-2024-24919★ 0githubgithub.com/LuisMateo1/Arbitrary-File-Read-CVE-2024-24919★ 0githubgithub.com/AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-★ 0githubgithub.com/sar-3mar/CVE-2024-24919_POC★ 0githubgithub.com/SpiX-7/CVE-2024-24919-POC★ 0githubgithub.com/ejaboz/cve-2024-24919★ 0githubgithub.com/CyprianAtsyor/CVE-2024-24919-Incident-Report.md★ 0githubgithub.com/CyberBibs/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-★ 0githubgithub.com/MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-Exploitation★ 0vulncheckvulncheck.com/xdb/8efe86b85385no verificadovulncheckvulncheck.com/xdb/5929a3c6eb8ano verificadovulncheckvulncheck.com/xdb/f0ef41012170no verificadovulncheckvulncheck.com/xdb/72bb189bb271no verificadovulncheckvulncheck.com/xdb/6d752fbb937cno verificadovulncheckvulncheck.com/xdb/c4b3fdf4a5a0no verificadovulncheckvulncheck.com/xdb/e82839fb2a3eno verificadovulncheckvulncheck.com/xdb/51cb208786d3no verificadovulncheckvulncheck.com/xdb/a3a8703af707no verificadovulncheckvulncheck.com/xdb/ab8c1e3e3646no verificadovulncheckvulncheck.com/xdb/f22cf8e4cd18no verificadovulncheckvulncheck.com/xdb/d71f8b001a77no verificadovulncheckvulncheck.com/xdb/1913565768f5no verificadovulncheckvulncheck.com/xdb/1b7c709c6360no verificadovulncheckvulncheck.com/xdb/f36c4553046bno verificadovulncheckvulncheck.com/xdb/4b560c5574a3no verificadovulncheckvulncheck.com/xdb/a709114311f6no verificadovulncheckvulncheck.com/xdb/9e2e6fb95473no verificadovulncheckvulncheck.com/xdb/a1c0ae86d246no verificadovulncheckvulncheck.com/xdb/ac33617aef51no verificadovulncheckvulncheck.com/xdb/092dd3ba67bdno verificadovulncheckvulncheck.com/xdb/0c9c869a08d3no verificadovulncheckvulncheck.com/xdb/70994ec0c5d3no verificadovulncheckvulncheck.com/xdb/de808000c9d3no verificadovulncheckvulncheck.com/xdb/0a8cb6d49711no verificadovulncheckvulncheck.com/xdb/445c6eae61ddno verificadovulncheckvulncheck.com/xdb/6b522b401a39no verificadovulncheckvulncheck.com/xdb/6243e133d9eano verificadovulncheckvulncheck.com/xdb/50e7b76bdc9fno verificadovulncheckvulncheck.com/xdb/de9876a305c5no verificadovulncheckvulncheck.com/xdb/6c1e9ba4333ano verificadovulncheckvulncheck.com/xdb/3e1daa797bf9no verificadovulncheckvulncheck.com/xdb/41aac64174f4no verificadovulncheckvulncheck.com/xdb/b21251c38b61no verificadovulncheckvulncheck.com/xdb/30fab5d1e270no verificadovulncheckvulncheck.com/xdb/73a9276dba9fno verificadovulncheckvulncheck.com/xdb/f6944d96f1ecno verificadovulncheckvulncheck.com/xdb/9d791cc169bfno verificadovulncheckvulncheck.com/xdb/9a3fb12624b4no verificadovulncheckvulncheck.com/xdb/47b5fb744bf8no verificadovulncheckvulncheck.com/xdb/68cc499283d4no verificadovulncheckvulncheck.com/xdb/28effee549e0no verificadovulncheckvulncheck.com/xdb/b4d18c6bf06eno verificadovulncheckvulncheck.com/xdb/91991bb01e09no verificadovulncheckvulncheck.com/xdb/307191685e1fno verificadovulncheckvulncheck.com/xdb/4cae1121ac6dno verificadovulncheckvulncheck.com/xdb/f4c58c27ce8dno verificadovulncheckvulncheck.com/xdb/2df82d697c50no verificadovulncheckvulncheck.com/xdb/6334b1c021a5no verificadovulncheckvulncheck.com/xdb/8ee8515985cano verificadovulncheckvulncheck.com/xdb/6f9dd13e5f7eno verificadovulncheckvulncheck.com/xdb/c74ebcca3b51no verificadovulncheckvulncheck.com/xdb/73f0d5b75fbdno verificadovulncheckvulncheck.com/xdb/4a6e5f342e96no verificadovulncheckvulncheck.com/xdb/35b00d2a87ccno verificadovulncheckvulncheck.com/xdb/a16b5b242987no verificadovulncheckvulncheck.com/xdb/f776bcf16de3no verificadocve_referencewww.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/no verificadovulncheckvulncheck.com/xdb/ba88bd25d4a7no verificadovulncheckvulncheck.com/xdb/320ad058f801no verificadovulncheckvulncheck.com/xdb/cb400c008cb4no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.