---
id: "CVE-2024-24919"
kind: "vulnerability"
aliases: ["CVE-2024-24919"]
title: "Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the\u2026"
severity: "high"
cvss: 8.6
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Check Point Quantum Security Gateways", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "checkpoint quantum spark firmware", "fixed": [], "affected": "= r80.40", "ecosystem": "vendor"}, {"name": "checkpoint quantum spark firmware", "fixed": [], "affected": "= r81", "ecosystem": "vendor"}, {"name": "checkpoint quantum security gateway firmware", "fixed": [], "affected": "= r80.40", "ecosystem": "vendor"}, {"name": "checkpoint cloudguard network security", "fixed": [], "affected": "= r80.40", "ecosystem": "vendor"}, {"name": "checkpoint cloudguard network security", "fixed": [], "affected": "= r81", "ecosystem": "vendor"}, {"name": "checkpoint cloudguard network security", "fixed": [], "affected": "= r81.10", "ecosystem": "vendor"}, {"name": "checkpoint cloudguard network security", "fixed": [], "affected": "= r81.20", "ecosystem": "vendor"}, {"name": "checkpoint quantum security gateway firmware", "fixed": [], "affected": "= r81.20", "ecosystem": "vendor"}, {"name": "checkpoint quantum security gateway firmware", "fixed": [], "affected": "= r81.10", "ecosystem": "vendor"}, {"name": "checkpoint quantum security gateway firmware", "fixed": [], "affected": "= r81", "ecosystem": "vendor"}, {"name": "checkpoint quantum spark firmware", "fixed": [], "affected": "= r81.10", "ecosystem": "vendor"}, {"name": "checkpoint quantum spark firmware", "fixed": [], "affected": "= r80.20", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["check-point", "exploited", "infrastructure", "network-appliance", "ransomware", "self-hosted", "vpn"]
not_affected_if: ["no-vpn-enabled", "not-internet-exposed"]
published_at: "2024-05-28T19:15:10+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-24919", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24919", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the…

Check Point Quantum security gateways leak information to unauthenticated internet attackers when IPSec VPN, Remote Access VPN or Mobile Access is enabled. CISA lists it as actively exploited and tied to ransomware campaigns, which means attackers can pull data from exposed gateways.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Check Point Quantum Security Gateways affected ? fixed ?
- vendor:checkpoint quantum spark firmware affected = r80.40 fixed ?
- vendor:checkpoint quantum spark firmware affected = r81 fixed ?
- vendor:checkpoint quantum security gateway firmware affected = r80.40 fixed ?
- vendor:checkpoint cloudguard network security affected = r80.40 fixed ?
- vendor:checkpoint cloudguard network security affected = r81 fixed ?
- vendor:checkpoint cloudguard network security affected = r81.10 fixed ?
- vendor:checkpoint cloudguard network security affected = r81.20 fixed ?
- vendor:checkpoint quantum security gateway firmware affected = r81.20 fixed ?
- vendor:checkpoint quantum security gateway firmware affected = r81.10 fixed ?
- vendor:checkpoint quantum security gateway firmware affected = r81 fixed ?
- vendor:checkpoint quantum spark firmware affected = r81.10 fixed ?
- vendor:checkpoint quantum spark firmware affected = r80.20 fixed ?

## How to check

Check whether the gateway has IPSec VPN, Remote Access VPN or Mobile Access enabled and is reachable from the internet.

## Fix

Apply the vendor mitigation per Check Point instructions, or stop using the affected gateway if no mitigation exists (CISA required action).

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-24919
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-24919

## From the sources

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_