CVE-2024-24919

Published May 28, 2024

Last updated 4 months ago

Check Point Security Gateways

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-24919 is a vulnerability affecting Check Point Security Gateways. It potentially allows an attacker to read certain information on gateways connected to the internet with remote Access VPN or Mobile Access Software Blades enabled. A security fix is available to mitigate this vulnerability. The vulnerability is an arbitrary file read issue where an attacker can access sensitive files, potentially with root privileges, by exploiting path traversal. If certificate authentication is not enabled, it may lead to unauthenticated remote code execution.

Description: Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Source: cve@checkpoint.com
NVD status: Analyzed

Insights

Analysis from the Intruder Security Team

Published Oct 15, 2024

This vulnerability affects Check Point Security Gateways. Active exploitation has been identified, and public proof of concepts have also been released.

More information is available in our blog post here.

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.6
Impact score: 4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Check Point Quantum Security Gateways Information Disclosure Vulnerability
Exploit added on: May 30, 2024
Exploit action due: Jun 20, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

cve@checkpoint.com: CWE-200
nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A0002A29-8B42-445D-9EC4-58BC93194241"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9016DDF6-285C-4E64-88D0-29ECCEF048F8"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:checkpoint:cloudguard_network_security:r80.40:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A382E0DC-2BBA-4EC9-A695-8062C3DC405D"
          },
          {
            "criteria": "cpe:2.3:a:checkpoint:cloudguard_network_security:r81.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3B134BAA-A9A2-4060-9CDE-3AB9770F07FF"
          },
          {
            "criteria": "cpe:2.3:a:checkpoint:cloudguard_network_security:r81.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4FCE5DC3-745A-4FC4-A2EF-AC4931E2A630"
          },
          {
            "criteria": "cpe:2.3:a:checkpoint:cloudguard_network_security:r81.20:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "121E2863-57A8-41F1-B7E0-B41600959A5E"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.20:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26705EAD-B1B6-40DB-8C10-1070E92E86F3"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9016DDF6-285C-4E64-88D0-29ECCEF048F8"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD9F864E-435C-4753-9831-EDBE4ABD7B31"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9016DDF6-285C-4E64-88D0-29ECCEF048F8"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E8E08B0C-4876-40A9-A422-3D327501F531"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9016DDF6-285C-4E64-88D0-29ECCEF048F8"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:checkpoint:quantum_spark_firmware:r81.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD5A3388-8310-4FA4-AD07-771F2E983674"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "FC94897D-88D2-4F56-BEBC-04899FE17197"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.20:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F325578-5CB0-486A-BD44-18E4BFB52441"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "FC94897D-88D2-4F56-BEBC-04899FE17197"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.