Exploited vulnerability

CVE-2024-24919

TLP:CLEAR

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

Facts

Vendor: Check Point
Product: Quantum Security Gateways
CVSS: 8.6
EPSS (probability of exploitation within 30 days): 100 %
On CISA's Known Exploited Vulnerabilities list since: 30 May 2024
First known exploitation: 30 May 2024
Used in ransomware campaigns (per CISA): Yes
CISA's deadline for US federal agencies: 20 June 2024
Weakness: CWE-200
First seen by Risk Letters: 30 May 2024

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD