CVE-2024-24919

Information disclosure

HIGH

8.6

CVSS Score

Published: May 28, 2024 at 06:22 PM UTC

Updated: August 5, 2026 at 05:34 AM UTC

5 products affected across 1 vendorCloudguard Network SecurityQuantum Spark FirmwareQuantum Security Gateway Firmware

Using Check Point Quantum Gateway, Spark Gateway and CloudGuard Network by checkpoint?

Get instant alerts when new vulnerabilities affect Check Point Quantum Gateway, Spark Gateway and CloudGuard Network - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.6

Exploitation

CISA KEV

Exploit prediction

EPSS 100%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score100.0%

EPSS (Exploit Prediction Scoring System) estimates a 100.0% chance this CVE is exploited in the wild within the next 30 days — higher than 100% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Ransomware Use

Known

Added to KEV

May 30, 2024

Remediation Due

Jun 20, 2024

858 days overdue

Notes

https://support.checkpoint.com/results/sk/sk182336

https://nvd.nist.gov/vuln/detail/CVE-2024-24919

Description

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.