CVE-2024-24919
Information disclosure
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Information disclosure
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
- Record
CVE-2024-24919- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2024-22282
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
- Record
EUVD-2024-22282- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
CISA KEV No score
Check Point Quantum Security Gateways Information Disclosure Vulnerability
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
- Record
CVE-2024-24919- Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
- Record
CVE-2024-24919- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | Bytenull00/CVE-2024-24919 | 2024-05-30 |
| PoC in GitHub | LucasKatashi/CVE-2024-24919 | 2024-05-30 |
| PoC in GitHub | am-eid/CVE-2024-24919 | 2024-05-30 |
| PoC in GitHub | c3rrberu5/CVE-2024-24919 | 2024-05-30 |
| PoC in GitHub | emanueldosreis/CVE-2024-24919 | 2024-05-30 |
| PoC in GitHub | hendprw/CVE-2024-24919 | 2024-05-30 |
| PoC in GitHub | 0xYumeko/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | 0xkalawy/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | GlobalsecureAcademy/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | GoatSecurity/CVE-2024-24919 | 2024-05-31 |
Show 17 moreShow less
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | GraySignal/CVE-2024-24919-Check-Point-Remote-Access-VPN | 2024-05-31 |
| PoC in GitHub | P3wc0/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | RevoltSecurities/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | Vulnpire/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | nexblade12/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | satriarizka/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | seed1337/CVE-2024-24919-POC | 2024-05-31 |
| PoC in GitHub | smackerdodi/CVE-2024-24919-nuclei-templater | 2024-05-31 |
| PoC in GitHub | un9nplayer/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | zam89/CVE-2024-24919 | 2024-05-31 |
| PoC in GitHub | Cappricio-Securities/CVE-2024-24919 | 2024-06-01 |
| PoC in GitHub | YN1337/CVE-2024-24919 | 2024-06-01 |
| PoC in GitHub | fernandobortotti/CVE-2024-24919 | 2024-06-01 |
| PoC in GitHub | ifconfig-me/CVE-2024-24919-Bulk-Scanner | 2024-06-01 |
| PoC in GitHub | r4p3c4/CVE-2024-24919-Checkpoint-Firewall-VPN-Check | 2024-06-01 |
| Nuclei | Check Point Quantum Gateway - Information Disclosure | |
| Metasploit | Check Point Security Gateway Arbitrary File Read |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits_more | PoC in GitHub | |
| exploitation | ||
| exploits, exploits_more | ||
| exploits | ||
| first indexed | CVE List, EUVD, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-24919 is a high vulnerability (CVSS 8.6) in Check Point Quantum Security Gateways, published May 28, 2024. CISA lists it as known to be exploited, since May 30, 2024. EUVD reports exploitation since May 30, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. No source names a fixed version.
References
The full exploit list has 32 more links.