CVE-2024-24919
Severity CVSS v4.0:
Pending analysis
Type:
CWE-200
Information Leak / Disclosure
Publication date:
28/05/2024
Last modified:
27/01/2025
Description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Impact
Base Score 3.x
8.60
Severity 3.x
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:* | ||
cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* | ||
cpe:2.3:a:checkpoint:cloudguard_network_security:r80.40:*:*:*:*:*:*:* | ||
cpe:2.3:a:checkpoint:cloudguard_network_security:r81.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:checkpoint:cloudguard_network_security:r81.10:*:*:*:*:*:*:* | ||
cpe:2.3:a:checkpoint:cloudguard_network_security:r81.20:*:*:*:*:*:*:* | ||
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.20:*:*:*:*:*:*:* | ||
cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.10:*:*:*:*:*:*:* | ||
cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.0:*:*:*:*:*:*:* | ||
cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:checkpoint:quantum_spark_firmware:r81.10:*:*:*:*:*:*:* | ||
cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:* | ||
cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.20:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page