CVE-2024-24919
Information disclosure
Description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
In plain language
AI Act nowCVE-2024-24919 is a Check Point flaw that lets an attacker read sensitive information from some Security Gateways without needing a login; if your network exposes remote Access VPN or Mobile Access to the internet, you should treat this as urgent.
CVE-2024-24919 enables information disclosure (CWE-200) over the network without authentication after reaching affected Check Point Security Gateways via specific access methods—particularly when Remote Access VPN or Mobile Access Software Blades are enabled.
What to do now
- Check whether you run any affected Check Point products (Quantum Gateway/Quantum Spark, Quantum Security Gateway/Quantum Spark, Spark Gateway, CloudGuard Network Security, CloudGuard Network) and whether Remote Access VPN or Mobile Access Software Blades are enabled.
- Verify you are on a security update level recommended by Check Point for CVE-2024-24919, and plan the upgrade/mitigation immediately.
- Apply the vendor’s mitigations from Check Point support guidance (or discontinue use if mitigations are unavailable).
- Review internet-facing access paths (VPN/mobile access) and confirm the gateway is reachable from the internet over those methods.
- If you cannot patch right away, implement the vendor workaround from the linked Check Point support article and reassess exposure until the full fix is applied.
CVSS Vector Breakdown
AV:NAttack VectorAC:LAttack ComplexityPR:NPrivileges RequiredUI:NUser InteractionS:CScopeC:HConfidentialityI:NIntegrityA:NAvailabilityWeaknesses
Affected Products
Exploitability
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Attack Graph
Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.
MITRE ATT&CK
1 techniqueReferences
- CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wilden·Rapid7 Blog· Exploited Security Management auth-bypass
- New Check Point Zero-Day Vulnerability Exploited in the Wilden-us·SecurityWeek· Exploited Security Management zero-day
- Check Point warns of SmartConsole zero-day exploited in attacksen-us·BleepingComputer· Exploited SmartConsole zero-day
- CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-dayen-us·BleepingComputer· Exploited Check Point Remote Access VPN Qilin ransomware
- Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)en·Rapid7 Blog· Exploited Check Point Remote Access VPN Qilin
- Sipping from the CVE Firehose: How We Prioritize Emerging Threats for Real-World Impacten-us·Bishop Fox· Research
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2024-24919 and every CVE in our database. Create a free account — no credit card required.
Create Free Account