Back to KEVs

CVE-2024-24919

Information disclosure

Basic Information

CVE State: PUBLISHED
Reserved Date: February 01, 2024
Published Date: May 28, 2024
Last Updated: August 01, 2024
Vendor: checkpoint
Product: Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
Description: Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

CVSS Scores

CVSS v3.1

8.6 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: partial

Exploit Status

Exploited in the Wild: Yes (added 2024-05-30 00:00:00 UTC) Source
Proof of Concept Available: Yes (added 2024-05-31 01:14:19 UTC) Source
Used in Malware: Yes (added 2024-05-30 00:00:00 UTC) Source

References

https://support.checkpoint.com/results/sk/sk182336

Known Exploited Vulnerability Information

Source	Added Date
CISA	2024-05-30 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24919.yaml	2025-04-26 00:00:00 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

geniuszly/CVE-2024-24919

Type: github • Created: 2024-09-29 08:20:56 UTC • Stars: 6

PoC script for CVE-2024-24919 vulnerability. It scans a list of target URLs to identify security issues by sending HTTP POST requests and analyzing server responses

protonnegativo/CVE-2024-24919

Type: github • Created: 2024-06-10 01:29:19 UTC • Stars: 2

Python script to automate the process of finding vulnerable sites for CVE-2024-24919.

verylazytech/CVE-2024-24919

Type: github • Created: 2024-06-09 06:54:51 UTC • Stars: 9

POC - CVE-2024–24919 - Check Point Security Gateways

GuayoyoCyber/CVE-2024-24919

Type: github • Created: 2024-06-03 18:17:45 UTC • Stars: 5

Nmap script to check vulnerability CVE-2024-24919

0nin0hanz0/CVE-2024-24919-PoC

Type: github • Created: 2024-06-03 13:30:31 UTC • Stars: 6

Rug4lo/CVE-2024-24919-Exploit

Type: github • Created: 2024-06-03 12:18:35 UTC • Stars: 3

CVE-2024-24919 Exploit and PoC - Critical LFI for Remote Access VPN or Mobile Access.

bigb0x/CVE-2024-24919-Sniper

Type: github • Created: 2024-06-02 20:16:22 UTC • Stars: 2

CVE-2024-24919 Sniper - A powerful tool for scanning Check Point Security Gateway CVE-2024-24919 vulnerability. Supports single & bulk scanning, multithreading, and generates detailed CSV reports. Ideal for penetration testers and security researchers.

r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN

Type: github • Created: 2024-06-01 12:02:43 UTC • Stars: 2

Herramienta de explotación para explotar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall

ifconfig-me/CVE-2024-24919-Bulk-Scanner

Type: github • Created: 2024-06-01 10:51:14 UTC • Stars: 31

CVE-2024-24919 [Check Point Security Gateway Information Disclosure]

un9nplayer/CVE-2024-24919

Type: github • Created: 2024-05-31 18:14:19 UTC • Stars: 16

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID: CVE-2024-24919