ACTIEF MISBRUIKT
CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability
| Leverancier | Check Point |
|---|---|
| Product | Quantum Security Gateways |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 30 mei 2024 |
| CISA-deadline (Amerikaanse overheid) | 20 jun 2024 |
| Gebruik door ransomware | Bekend |
| Zwakte (CWE) | CWE-200 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
BRONNEN
Andere lekken bij Check Point
- CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability
- CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability
- CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability
- CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.