Live › vulnerability › CVE-2024-24919
Go to dashboardCheck Point Quantum security gateways leak information to unauthenticated internet attackers when IPSec VPN, Remote Access VPN or Mobile Access is enabled. CISA lists it as actively exploited and tied to ransomware campaigns, which means attackers can pull data from exposed gateways.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Check Point Quantum Security Gateways | vendor | – | – |
| checkpoint quantum spark firmware | vendor | = r80.40 | – |
| checkpoint quantum spark firmware | vendor | = r81 | – |
| checkpoint quantum security gateway firmware | vendor | = r80.40 | – |
| checkpoint cloudguard network security | vendor | = r80.40 | – |
| checkpoint cloudguard network security | vendor | = r81 | – |
| checkpoint cloudguard network security | vendor | = r81.10 | – |
| checkpoint cloudguard network security | vendor | = r81.20 | – |
| checkpoint quantum security gateway firmware | vendor | = r81.20 | – |
| checkpoint quantum security gateway firmware | vendor | = r81.10 | – |
| checkpoint quantum security gateway firmware | vendor | = r81 | – |
| checkpoint quantum spark firmware | vendor | = r81.10 | – |
| checkpoint quantum spark firmware | vendor | = r80.20 | – |
Check whether the gateway has IPSec VPN, Remote Access VPN or Mobile Access enabled and is reachable from the internet.
Apply the vendor mitigation per Check Point instructions, or stop using the affected gateway if no mitigation exists (CISA required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2024-24919")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.