{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-24919", "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "state": "PUBLISHED", "assignerShortName": "checkpoint", "dateReserved": "2024-02-01T15:19:26.279Z", "datePublished": "2024-05-28T18:22:19.401Z", "dateUpdated": "2026-08-05T03:55:58.766Z"}, "containers": {"cna": {"affected": [{"product": "Check Point Quantum Gateway, Spark Gateway and CloudGuard Network", "vendor": "checkpoint", "versions": [{"status": "affected", "version": "Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20."}]}], "title": "Information disclosure", "descriptions": [{"lang": "en", "value": "Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "shortName": "checkpoint", "dateUpdated": "2024-05-30T12:40:21.757Z"}, "references": [{"url": "https://support.checkpoint.com/results/sk/sk182336"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"}}], "x_gcve": [{"vulnId": "CVE-2024-24919", "recordType": "advisory"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-05-30T00:00:00+00:00", "options": [{"Exploitation": "active"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-24919"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2024-05-30", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919"}}}], "affected": [{"cpes": ["cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_security_gateway_firmware", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_security_gateway_firmware", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_security_gateway_firmware", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_security_gateway_firmware", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "affected"}, {"cpes": ["cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "cloudguard_network", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "cloudguard_network", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "cloudguard_network", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "cloudguard_network", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_spark_appliances", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_spark_appliances", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_spark_appliances", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*"], "vendor": "checkpoint", "product": "quantum_spark_appliances", "versions": [{"status": "affected", "version": "r80.40"}, {"status": "affected", "version": "r81"}, {"status": "affected", "version": "r81.10"}, {"status": "affected", "version": "r81.20"}], "defaultStatus": "unknown"}], "references": [{"url": "https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/", "tags": ["exploit"]}, {"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919", "tags": ["government-resource"]}], "timeline": [{"lang": "en", "time": "2024-05-30T00:00:00.000Z", "value": "CVE-2024-24919 added to CISA KEV"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T03:55:58.766Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:36:20.565Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.checkpoint.com/results/sk/sk182336", "tags": ["x_transferred"]}]}]}, "vulnerability-lookup:meta": {"cisa_known_exploited": {"cveID": "CVE-2024-24919", "cwes": "[\"CWE-200\"]", "dateAdded": "2024-05-30", "dueDate": "2024-06-20", "forensicTriage": "No", "knownRansomwareCampaignUse": "Known", "notes": "https://support.checkpoint.com/results/sk/sk182336 ; https://nvd.nist.gov/vuln/detail/CVE-2024-24919", "product": "Quantum Security Gateways", "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.", "vendorProject": "Check Point", "vulnerabilityName": "Check Point Quantum Security Gateways Information Disclosure Vulnerability"}, "epss": {"cve": "CVE-2024-24919", "date": "2026-09-28", "epss": "0.99978", "percentile": "0.9998"}, "nvd": "{\"cve\":{\"id\":\"CVE-2024-24919\",\"sourceIdentifier\":\"cve@checkpoint.com\",\"published\":\"2024-05-28T19:15:10.060\",\"lastModified\":\"2026-08-05T05:16:41.323\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.\"},{\"lang\":\"es\",\"value\":\"Potencialmente, permitir que un atacante lea cierta informaci\u00f3n en Check Point Security Gateways una vez conectado a Internet y habilitado con VPN de acceso remoto o software Blades de acceso m\u00f3vil. Hay disponible una soluci\u00f3n de seguridad que mitiga esta vulnerabilidad.\"}],\"affected\":[{\"source\":\"cve@checkpoint.com\",\"affectedData\":[{\"vendor\":\"checkpoint\",\"product\":\"Check Point Quantum Gateway, Spark Gateway and CloudGuard Network\",\"versions\":[{\"version\":\"Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20.\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"checkpoint\",\"product\":\"quantum_security_gateway_firmware\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"quantum_security_gateway_firmware\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"quantum_security_gateway_firmware\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"quantum_security_gateway_firmware\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"cloudguard_network\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"cloudguard_network\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"cloudguard_network\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"cloudguard_network\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"quantum_spark_appliances\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"quantum_spark_appliances\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"quantum_spark_appliances\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]},{\"vendor\":\"checkpoint\",\"product\":\"quantum_spark_appliances\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"r80.40\",\"status\":\"affected\"},{\"version\":\"r81\",\"status\":\"affected\"},{\"version\":\"r81.10\",\"status\":\"affected\"},{\"version\":\"r81.20\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cve@checkpoint.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":4.0},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":4.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-30T00:00:00+00:00\",\"id\":\"CVE-2024-24919\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"cisaExploitAdd\":\"2024-05-30\",\"cisaActionDue\":\"2024-06-20\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"Check Point Quantum Security Gateways Information Disclosure Vulnerability\",\"weaknesses\":[{\"source\":\"cve@checkpoint.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"362E95B3-0727-4516-A80F-A48CC96D60FC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC94897D-88D2-4F56-BEBC-04899FE17197\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_spark_firmware:r81:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA87CADC-39F9-45F9-9795-02C496691997\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC94897D-88D2-4F56-BEBC-04899FE17197\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0002A29-8B42-445D-9EC4-58BC93194241\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9016DDF6-285C-4E64-88D0-29ECCEF048F8\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:cloudguard_network_security:r80.40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A382E0DC-2BBA-4EC9-A695-8062C3DC405D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:cloudguard_network_security:r81:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB6D99AA-2186-44F1-A1B0-C9F9EEDE8CF1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:cloudguard_network_security:r81.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FCE5DC3-745A-4FC4-A2EF-AC4931E2A630\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:checkpoint:cloudguard_network_security:r81.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"121E2863-57A8-41F1-B7E0-B41600959A5E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26705EAD-B1B6-40DB-8C10-1070E92E86F3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9016DDF6-285C-4E64-88D0-29ECCEF048F8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD9F864E-435C-4753-9831-EDBE4ABD7B31\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9016DDF6-285C-4E64-88D0-29ECCEF048F8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B0EDB21-9305-4601-AB96-A77BD00F311D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9016DDF6-285C-4E64-88D0-29ECCEF048F8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_spark_firmware:r81.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD5A3388-8310-4FA4-AD07-771F2E983674\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC94897D-88D2-4F56-BEBC-04899FE17197\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F325578-5CB0-486A-BD44-18E4BFB52441\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC94897D-88D2-4F56-BEBC-04899FE17197\"}]}]}],\"references\":[{\"url\":\"https://support.checkpoint.com/results/sk/sk182336\",\"source\":\"cve@checkpoint.com\",\"tags\":[\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://support.checkpoint.com/results/sk/sk182336\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]},{\"url\":\"https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Third Party Advisory\"]}]}}", "redhat_vex": {"current_release_date": "2026-03-27T10:12:43+00:00", "cve": "CVE-2024-24919", "id": "CVE-2024-24919", "initial_release_date": "2024-01-01T00:00:00+00:00", "product_status:known_not_affected": "1", "source": "Red Hat CSAF VEX", "status": "final", "title": "Information disclosure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-24919.json", "version": "3"}, "vulnrichment": {"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://support.checkpoint.com/results/sk/sk182336\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T23:36:20.565Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-24919\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-31T04:00:11.841700Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2024-05-30\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_security_gateway_firmware\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_security_gateway_firmware\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_security_gateway_firmware\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_security_gateway_firmware\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"cloudguard_network\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"cloudguard_network\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"cloudguard_network\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"cloudguard_network\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_spark_appliances\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_spark_appliances\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_spark_appliances\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*\"], \"vendor\": \"checkpoint\", \"product\": \"quantum_spark_appliances\", \"versions\": [{\"status\": \"affected\", \"version\": \"r80.40\"}, {\"status\": \"affected\", \"version\": \"r81\"}, {\"status\": \"affected\", \"version\": \"r81.10\"}, {\"status\": \"affected\", \"version\": \"r81.20\"}], \"defaultStatus\": \"unknown\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-05-30T00:00:00.000Z\", \"value\": \"CVE-2024-24919 added to CISA KEV\"}], \"references\": [{\"url\": \"https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/\", \"tags\": [\"exploit\"]}, {\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919\", \"tags\": [\"government-resource\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-28T20:17:14.392Z\"}}], \"cna\": {\"title\": \"Information disclosure\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.6, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"checkpoint\", \"product\": \"Check Point Quantum Gateway, Spark Gateway and CloudGuard Network\", \"versions\": [{\"status\": \"affected\", \"version\": \"Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20.\"}]}], \"references\": [{\"url\": \"https://support.checkpoint.com/results/sk/sk182336\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor\"}]}], \"providerMetadata\": {\"orgId\": \"897c38be-0345-43cd-b6cf-fe179e0c4f45\", \"shortName\": \"checkpoint\", \"dateUpdated\": \"2024-05-30T12:40:21.757Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2024-24919\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T03:55:58.766Z\", \"dateReserved\": \"2024-02-01T15:19:26.279Z\", \"assignerOrgId\": \"897c38be-0345-43cd-b6cf-fe179e0c4f45\", \"datePublished\": \"2024-05-28T18:22:19.401Z\", \"assignerShortName\": \"checkpoint\"}", "dataType": "CVE_RECORD", "dataVersion": "5.2"}}}