CVE-2024-24919
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
CISA Known Exploited Vulnerability
Vendor / Product
Check Point — Quantum Security Gateways
Date Added
2024-05-30
Remediation Due
2024-06-20
Ransomware Use
CONFIRMED
https://support.checkpoint.com/results/sk/sk182336 ; https://nvd.nist.gov/vuln/detail/CVE-2024-24919
Weakness Classification (1)
Affected Software (12)
| Vendor | Product | Version |
|---|---|---|
| checkpoint | cloudguard_network_security | r80.40 |
| checkpoint | cloudguard_network_security | r81 |
| checkpoint | cloudguard_network_security | r81.10 |
| checkpoint | cloudguard_network_security | r81.20 |
| checkpoint | quantum_security_gateway_firmware | r80.40 |
| checkpoint | quantum_security_gateway_firmware | r81.20 |
| checkpoint | quantum_security_gateway_firmware | r81.10 |
| checkpoint | quantum_security_gateway_firmware | r81 |
| checkpoint | quantum_spark_firmware | r80.40 |
| checkpoint | quantum_spark_firmware | r81 |
| checkpoint | quantum_spark_firmware | r81.10 |
| checkpoint | quantum_spark_firmware | r80.20 |
References & Advisories (3)
US Government Resource
Third Party Advisory
Mitigation
Patch
Vendor Advisory