CVE-2024-24919 PoC — Information disclosure

Source

https://github.com/emanueldosreis/CVE-2024-24919

Associated Vulnerability

Title: Information disclosure (CVE-2024-24919)
Description:Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Description

POC exploit for CVE-2024-24919 information leakage

Readme

Checkpoint POC Exploit for testing purposes to retrieve sensitive files from Checkpoint based on this article: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ 

I am not responsible for any abuse of this script, the intention here is for defenders to test their own devices.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →