CVE-2024-24919

CVE Enrichment

CVSS: 8.6 HIGH
EPSS: 99.98%
EPSS Percentile: 99.98%
CISA KEV: YES — Known Exploited Vulnerability

Description

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: cve@checkpoint.com
Published: 29-May-2024 02:15
Last Modified: 05-Aug-2026 12:16
EPSS Date: 2026-10-12
CWE: CWE-200

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:C /
                            C:H /
                            I:N /
                            A:N

CISA KEV Details

Date Added: 2024-05-30
Remediation Due: 2024-06-20
Known Ransomware Campaign Use: Known
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: https://support.checkpoint.com/results/sk/sk182336 ; https://nvd.nist.gov/vuln/detail/CVE-2024-24919

Affected Products / Versions

checkpoint / quantum_spark_firmware
Version / affected range: r80.40
cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.40:*:*:*:*:*:*:*
checkpoint / quantum_spark_firmware
Version / affected range: r81
cpe:2.3:o:checkpoint:quantum_spark_firmware:r81:*:*:*:*:*:*:*
checkpoint / quantum_security_gateway_firmware
Version / affected range: r80.40
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*
checkpoint / cloudguard_network_security
Version / affected range: r80.40
cpe:2.3:a:checkpoint:cloudguard_network_security:r80.40:*:*:*:*:*:*:*
checkpoint / cloudguard_network_security
Version / affected range: r81
cpe:2.3:a:checkpoint:cloudguard_network_security:r81:*:*:*:*:*:*:*
checkpoint / cloudguard_network_security
Version / affected range: r81.10
cpe:2.3:a:checkpoint:cloudguard_network_security:r81.10:*:*:*:*:*:*:*
checkpoint / cloudguard_network_security
Version / affected range: r81.20
cpe:2.3:a:checkpoint:cloudguard_network_security:r81.20:*:*:*:*:*:*:*
checkpoint / quantum_security_gateway_firmware
Version / affected range: r81.20
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.20:*:*:*:*:*:*:*
checkpoint / quantum_security_gateway_firmware
Version / affected range: r81.10
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.10:*:*:*:*:*:*:*
checkpoint / quantum_security_gateway_firmware
Version / affected range: r81
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:*
checkpoint / quantum_spark_firmware
Version / affected range: r81.10
cpe:2.3:o:checkpoint:quantum_spark_firmware:r81.10:*:*:*:*:*:*:*
checkpoint / quantum_spark_firmware
Version / affected range: r80.20
cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.20:*:*:*:*:*:*:*

References

Last enrichment sync: 13-Oct-2026 11:03
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

network (VPN) environment, likely via the exploitation of an information disclosure vulnerability (CVE-2024-24919) affecting Check Point Security Gateway devices. Darktrace Shows Cyber AI Analyst Investigating Four Advanced Threat Incidents

CVE (1)

Malware (3)

People (4)

Threat Actors (2)

Vendors (2)

Products (6)

Tools (4)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.