CVE-2024-24919KEV · OVERDUECWE-200information-disclosure

Check Point Quantum Security Gateways Information Disclosure Vulnerability

High · published May 28, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.6. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.

856
days past CISA
deadline
CVSS v3.1
8.6
EPSS
100%
Percentile
100.0
In the wild
Confirmed
What it is

🚨 A simple misconfiguration could let attackers sneak a peek at sensitive data on Check Point Security Gateways! 🔥 Think of it like a hotel room with a window that’s left ajar; anyone walking by can take a look inside without needing a key. In this case, remote access is the hand that opens the window. If exploited, an attacker could gain unauthorized access to confidential information, potentially exposing your network's secrets and compromising security. This is a serious risk that could lead to devastating consequences for your organization, as the attackers could perform reconnaissance or even launch further attacks.

Put simply

Think of it like a hotel room with a window that’s left ajar; anyone walking by can take a look inside without needing a key. In this case, remote access is the hand that opens the window. This vulnerability arises from improper access controls in Check Point Security Gateways with Remote Access VPN or Mobile Access Software Blades enabled. Once connected to the internet, an attacker can read sensitive information that should be protected.

What to do

If exploited, an attacker could gain unauthorized access to confidential information, potentially exposing your network's secrets and compromising security. This is a serious risk that could lead to devastating consequences for your organization, as the attackers could perform reconnaissance or even launch further attacks. To remediate this vulnerability, ensure you apply the latest security patch provided by Check Point as soon as possible. Check your configurations for Remote Access VPN and Mobile Access Software Blades to ensure that only authorized users can connect. Regular audits of your security settings can help reduce risks further. You've got this! With the right actions, you can keep your network secure and defend against these sneaky vulnerabilities. 🛡️

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.99978 · 100.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-05-28T23:15Z
KEV added
2024-05-30 · due 2024-06-20
Affected products (12)
ProductVersionsFixed in
checkpoint/quantum_spark_firmwareall versions—
checkpoint/quantum_spark_firmwareall versions—
checkpoint/quantum_security_gateway_firmwareall versions—
checkpoint/cloudguard_network_securityall versions—
checkpoint/cloudguard_network_securityall versions—
checkpoint/cloudguard_network_securityall versions—
checkpoint/cloudguard_network_securityall versions—
checkpoint/quantum_security_gateway_firmwareall versions—
checkpoint/quantum_security_gateway_firmwareall versions—
checkpoint/quantum_security_gateway_firmwareall versions—
checkpoint/quantum_spark_firmwareall versions—
checkpoint/quantum_spark_firmwareall versions—
References (4)
EPSS history
Timeline
  • 30 MAY 00:00Z
    Added to CISA KEV — remediate by Jun 20
    kev
  • 28 MAY 18:22Z
    Information disclosure
    cvelistv5