CVE-2024-24919 PoC — Information disclosure

Source

https://github.com/un9nplayer/CVE-2024-24919

Associated Vulnerability

Title: Information disclosure (CVE-2024-24919)
Description:Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Description

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID: CVE-2024-24919

Readme

# CVE-2024-24919 Exploit

## Overview

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files.
**CVE ID**: CVE-2024-24919

**Severity**: Critical

## Table of Contents

- [Vulnerability-details](https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/)
- [Exploit Details](#exploit-details)


## Usage

1. Clone the repository:
    ```bash
    git clone https://github.com/un9nplayer/CVE-2024-24919.git
    cd CVE-2024-24919
    ```
    
2. Target/IP must be in domain-IP.txt
   ```bash
   echo "[target/IP]" >> domain-IP.txt
   ```
   
3. Run the exploit:
    ```bash
    python3 CVE-2024-24919.py 
    ```


## POC Video

[![YouTube](http://i.ytimg.com/vi/h7iWwEBmlck/hqdefault.jpg)](https://www.youtube.com/watch?v=h7iWwEBmlck)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →