Check Point SmartConsole DLL Hijacking Vulnerability CVE-2024-24916 Advisory

Key Information Vulnerability Overview CVE ID: CVE-2024-24916 Vulnerability Type: DLL Hijacking Product: SmartConsole Affected Versions: R81.10, R81.20 Operating System: Windows Platform: Intel/PC Security Alert Level: Low Symptoms Untrusted DLLs in the installer directory may be loaded and executed, potentially leading to arbitrary code execution with installer privileges (administrator). This issue has been assigned ID CVE-2024-24916. Cause The installer relies on the default Windows DLL search order, which includes the current working directory. If the required DLL is missing or not explicitly loaded from a secure path, this may result in DLL hijacking. Resolution The issue has been fixed. The fix is included in the following SmartConsole installers: - SmartConsole for R82 - SmartConsole for R81.20 – starting from Build 656 (released on August 19, 2024) - SmartConsole for R81.10 – starting from Build 426 (released on August 20, 2024) Recommendations Check Point recommends always upgrading to the recommended version [Security Gateway / VSX / Security Management Server / Multi-Domain Security Management Server / SmartConsole]. Notes For the list of supported versions, refer to the Support Lifecycle Policy. If the SmartConsole client connects to the internet, SmartConsole will automatically suggest installing the latest recommended build. In this case, there is no need to manually download and install newer builds.

Goal Reached Thanks to every supporter — we hit 100%!

Check Point SmartConsole DLL Hijacking Vulnerability CVE-2024-24916 Advisory