CVE-2024-24919— Check Point Security Gateways 安全漏洞
一分钟漏洞结论
影响对象
checkpoint Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Check Point Security Gateways是以色列Check Point公司的一个人工智能驱动的 NGFW 安全网关。 Check Point Security Gateways 存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。
公开利用映射 2
Metasploit · 1
checkpoint_gateway_fileread_cve_2024_24919.rb [auxiliary]
Nuclei · 1
CVE-2024-24919.yaml [template]
已观察到在野利用
github_trending · low
cisa_kev · confirmed
可能的 ATT&CK 技术 1 AI
T1530 · Data from Cloud Storage影响版本矩阵 1
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| checkpoint | Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Po |
affected |
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2024-24919 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Information disclosure
来源: CVE Program / CVE List V5
Vulnerability Description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
信息暴露
来源: CVE Program / CVE List V5
Vulnerability Title
Check Point Security Gateways 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Check Point Security Gateways是以色列Check Point公司的一个人工智能驱动的 NGFW 安全网关。 Check Point Security Gateways 存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| checkpoint | Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. | - |
|
二、漏洞 CVE-2024-24919 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN. | https://github.com/c3rrberu5/CVE-2024-24919 | POC详情 |
| 2 | POC exploit for CVE-2024-24919 information leakage | https://github.com/emanueldosreis/CVE-2024-24919 | POC详情 |
| 3 | None | https://github.com/hendprw/CVE-2024-24919 | POC详情 |
| 4 | CVE-2024-24919 Exploit PoC | https://github.com/LucasKatashi/CVE-2024-24919 | POC详情 |
| 5 | None | https://github.com/eoslvs/CVE-2024-24919 | POC详情 |
| 6 | Quick and simple script that takes as input a file with multiple URLs to check for the CVE-2024-24919 vulnerability in CHECKPOINT | https://github.com/Bytenull00/CVE-2024-24919 | POC详情 |
| 7 | None | https://github.com/am-eid/CVE-2024-24919 | POC详情 |
| 8 | None | https://github.com/pewc0/CVE-2024-24919 | POC详情 |
| 9 | Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability (Wrong Check Point) | https://github.com/zam89/CVE-2024-24919 | POC详情 |
| 10 | A simple bash and python script to check for the vulnerability CVE-2024-24919 | https://github.com/satriarizka/CVE-2024-24919 | POC详情 |
| 11 | CLI based PoC for CVE-2024-24919 | https://github.com/3UR/CVE-2024-24919 | POC详情 |
| 12 | An Vulnerability detection and Exploitation tool for CVE-2024-24919 | https://github.com/RevoltSecurities/CVE-2024-24919 | POC详情 |
| 13 | None | https://github.com/Vulnpire/CVE-2024-24919 | POC详情 |
| 14 | None | https://github.com/seed1337/CVE-2024-24919-POC | POC详情 |
| 15 | None | https://github.com/0x3f3c/CVE-2024-24919 | POC详情 |
| 16 | None | https://github.com/Praison001/CVE-2024-24919-Check-Point-Remote-Access-VPN | POC详情 |
| 17 | Nuclei template for CVE-2024-24919 | https://github.com/smackerdodi/CVE-2024-24919-nuclei-templater | POC详情 |
| 18 | CVE-2024-24919 exploit | https://github.com/GoatSecurity/CVE-2024-24919 | POC详情 |
| 19 | Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNs | https://github.com/GlobalsecureAcademy/CVE-2024-24919 | POC详情 |
| 20 | None | https://github.com/nexblade12/CVE-2024-24919 | POC详情 |
| 21 | This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID: CVE-2024-24919 | https://github.com/un9nplayer/CVE-2024-24919 | POC详情 |
| 22 | None | https://github.com/MohamedWagdy7/CVE-2024-24919 | POC详情 |
| 23 | Check Point Security Gateway (LFI) | https://github.com/Cappricio-Securities/CVE-2024-24919 | POC详情 |
| 24 | None | https://github.com/fernandobortotti/CVE-2024-24919 | POC详情 |
| 25 | None | https://github.com/nicolvsrlr27/CVE-2024-24919 | POC详情 |
| 26 | None | https://github.com/gurudattch/CVE-2024-24919 | POC详情 |
| 27 | Mass scanner for CVE-2024-24919 | https://github.com/YN1337/CVE-2024-24919 | POC详情 |
| 28 | CVE-2024-24919 [Check Point Security Gateway Information Disclosure] | https://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner | POC详情 |
| 29 | Esta herramienta se utiliza para validar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall | https://github.com/r4p3c4/CVE-2024-24919-Checkpoint-Firewall-VPN-Check | POC详情 |
| 30 | Herramienta de explotación para explotar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall | https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2024-24919 的情报信息
请登录查看更多情报信息。
CVE-2024-24919 其他参考 (1)
IV. Related Vulnerabilities
V. Comments for CVE-2024-24919
暂无评论