Check Point Quantum Security Gateways Information Disclosure Vulnerability (CVE-2024-24919)
Severity: high · Patch status: patched · Since 2024-05-30 · CVE-2024-24919
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances. CISA added CVE-2024-24919 to its Known Exploited Vulnerabilities catalog on May 30, 2024, which means attackers are exploiting it in the wild. CISA reports known use in ransomware campaigns.
What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- US federal agencies must remediate by Jun 20, 2024 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
