CVE-2024-24919— Information disclosure
Quick assessment
Affected
checkpoint Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Check Point Security Gateways是以色列Check Point公司的一个人工智能驱动的 NGFW 安全网关。 Check Point Security Gateways 存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。
Public Exploits 2
Metasploit · 1
checkpoint_gateway_fileread_cve_2024_24919.rb [auxiliary]
Nuclei · 1
CVE-2024-24919.yaml [template]
In-the-Wild Activity Observed
github_trending · low
cisa_kev · confirmed
Possible ATT&CK Techniques 1 AI
T1530 · Data from Cloud StorageAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| checkpoint | Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Po |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-24919
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Check Point Security Gateways 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Check Point Security Gateways是以色列Check Point公司的一个人工智能驱动的 NGFW 安全网关。 Check Point Security Gateways 存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| checkpoint | Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. | - |
|
II. Public POCs for CVE-2024-24919
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN. | https://github.com/c3rrberu5/CVE-2024-24919 | POC Details |
| 2 | POC exploit for CVE-2024-24919 information leakage | https://github.com/emanueldosreis/CVE-2024-24919 | POC Details |
| 3 | None | https://github.com/hendprw/CVE-2024-24919 | POC Details |
| 4 | CVE-2024-24919 Exploit PoC | https://github.com/LucasKatashi/CVE-2024-24919 | POC Details |
| 5 | None | https://github.com/eoslvs/CVE-2024-24919 | POC Details |
| 6 | Quick and simple script that takes as input a file with multiple URLs to check for the CVE-2024-24919 vulnerability in CHECKPOINT | https://github.com/Bytenull00/CVE-2024-24919 | POC Details |
| 7 | None | https://github.com/am-eid/CVE-2024-24919 | POC Details |
| 8 | None | https://github.com/pewc0/CVE-2024-24919 | POC Details |
| 9 | Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability (Wrong Check Point) | https://github.com/zam89/CVE-2024-24919 | POC Details |
| 10 | A simple bash and python script to check for the vulnerability CVE-2024-24919 | https://github.com/satriarizka/CVE-2024-24919 | POC Details |
| 11 | CLI based PoC for CVE-2024-24919 | https://github.com/3UR/CVE-2024-24919 | POC Details |
| 12 | An Vulnerability detection and Exploitation tool for CVE-2024-24919 | https://github.com/RevoltSecurities/CVE-2024-24919 | POC Details |
| 13 | None | https://github.com/Vulnpire/CVE-2024-24919 | POC Details |
| 14 | None | https://github.com/seed1337/CVE-2024-24919-POC | POC Details |
| 15 | None | https://github.com/0x3f3c/CVE-2024-24919 | POC Details |
| 16 | None | https://github.com/Praison001/CVE-2024-24919-Check-Point-Remote-Access-VPN | POC Details |
| 17 | Nuclei template for CVE-2024-24919 | https://github.com/smackerdodi/CVE-2024-24919-nuclei-templater | POC Details |
| 18 | CVE-2024-24919 exploit | https://github.com/GoatSecurity/CVE-2024-24919 | POC Details |
| 19 | Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNs | https://github.com/GlobalsecureAcademy/CVE-2024-24919 | POC Details |
| 20 | None | https://github.com/nexblade12/CVE-2024-24919 | POC Details |
| 21 | This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID: CVE-2024-24919 | https://github.com/un9nplayer/CVE-2024-24919 | POC Details |
| 22 | None | https://github.com/MohamedWagdy7/CVE-2024-24919 | POC Details |
| 23 | Check Point Security Gateway (LFI) | https://github.com/Cappricio-Securities/CVE-2024-24919 | POC Details |
| 24 | None | https://github.com/fernandobortotti/CVE-2024-24919 | POC Details |
| 25 | None | https://github.com/nicolvsrlr27/CVE-2024-24919 | POC Details |
| 26 | None | https://github.com/gurudattch/CVE-2024-24919 | POC Details |
| 27 | Mass scanner for CVE-2024-24919 | https://github.com/YN1337/CVE-2024-24919 | POC Details |
| 28 | CVE-2024-24919 [Check Point Security Gateway Information Disclosure] | https://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner | POC Details |
| 29 | Esta herramienta se utiliza para validar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall | https://github.com/r4p3c4/CVE-2024-24919-Checkpoint-Firewall-VPN-Check | POC Details |
| 30 | Herramienta de explotación para explotar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall | https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-24919
请登录查看更多情报信息。
Other References for CVE-2024-24919 (1)
IV. Related Vulnerabilities
Same vendor: checkpoint
-
CVE-2026-93616
Directory Traversal and File upload allows execution of arbi -
CVE-2026-91843
Stack overflow in login process to the Security Management a -
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding -
CVE-2026-85102
Improper Certificate Validation in Quantum Security Gateway -
CVE-2026-18574
Authentication Bypass in Check Point Security Management Ser
Same weakness: CWE-200
-
CVE-2026-100149
WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share -
CVE-2026-105030
Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via -
CVE-2026-104476
Backdrop CMS before 1.35.1 Information Disclosure via Config -
CVE-2026-103627
Google Chrome <154.0.8037.97 SVG信息泄露漏洞 -
CVE-2026-104455
YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplu
V. Comments for CVE-2024-24919
No comments yet