CVE-2024-24919

Description

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

CVSS v3.1 Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild.

Added: May 30, 2024 Remediation due: Jun 20, 2024 Known ransomware use

Weakness Type (CWE)

CWE-200 CWE-200

Affected Products

Vendor	Product	Versions
checkpoint	quantum_spark_firmware	All
checkpoint	quantum_spark	All
checkpoint	quantum_spark_firmware	All
checkpoint	quantum_spark	All
checkpoint	quantum_security_gateway_firmware	All
checkpoint	quantum_security_gateway	All
checkpoint	cloudguard_network_security	All
checkpoint	cloudguard_network_security	All
checkpoint	cloudguard_network_security	All
checkpoint	cloudguard_network_security	All
checkpoint	quantum_security_gateway_firmware	All
checkpoint	quantum_security_gateway	All
checkpoint	quantum_security_gateway_firmware	All
checkpoint	quantum_security_gateway	All
checkpoint	quantum_security_gateway_firmware	All
checkpoint	quantum_security_gateway	All
checkpoint	quantum_spark_firmware	All
checkpoint	quantum_spark	All
checkpoint	quantum_spark_firmware	All
checkpoint	quantum_spark	All

References

Advisories & Patches

https://support.checkpoint.com/results/sk/sk182336 https://support.checkpoint.com/results/sk/sk182336

Other References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919 https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/

Frequently Asked Questions

What is CVE-2024-24919? +

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. It has a CVSS v3.1 base score of 8.6 (HIGH). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.

How severe is CVE-2024-24919? +

CVE-2024-24919 has a CVSS v3.1 score of 8.6 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2024-24919? +

CVE-2024-24919 affects products from checkpoint, specifically: cloudguard_network_security, quantum_security_gateway, quantum_security_gateway_firmware, quantum_spark, quantum_spark_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-24919? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-15625

Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.

CVE-2026-22051

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability. Successful exploit could …

CVE-2026-40166

authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, authenticated non-admin users with at …

CVE-2025-22138

@codidact/qpixel is a Q&A-based community knowledge-sharing software. In affected versions when a category is set to private or limited-visibility within …

CVE-2025-0659

A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character sequence in …

CVE-2025-24884

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vector configuration was used …