Checkpoint VPN Information Disclosure Leading to Remote Auth
CVE-2024-24919 Published on May 28, 2024

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

NVD

Known Exploited Vulnerability

This Check Point Quantum Security Gateways Information Disclosure Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

The following remediation steps are recommended / required by June 20, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vulnerability Analysis

CVE-2024-24919 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. This vulnerability is known to be actively exploited by threat actors in an automatable fashion. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2024-24919 has been classified to as an Information Disclosure vulnerability or weakness.


Products Associated with CVE-2024-24919

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-24919 are published in these products:

Check Point Software Cloudguard Network Security
 
Check Point Software Quantum Security Gateway Firmware
 
Check Point Software Cloudguard Network
 
Check Point Software Quantum Spark Appliances
 

Affected Versions

checkpoint Check Point Quantum Gateway, Spark Gateway and CloudGuard Network: checkpoint quantum_security_gateway_firmware: checkpoint quantum_security_gateway_firmware: checkpoint quantum_security_gateway_firmware: checkpoint quantum_security_gateway_firmware: checkpoint cloudguard_network: checkpoint cloudguard_network: checkpoint cloudguard_network: checkpoint cloudguard_network: checkpoint quantum_spark_appliances: checkpoint quantum_spark_appliances: checkpoint quantum_spark_appliances: checkpoint quantum_spark_appliances:

Exploit Probability

EPSS
94.34%
Percentile
99.95%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.