CVE-2024-24919

Known Exploited Vulnerability Entry External Catalog

Entry Details

CVE-2024-24919

Confirmed

Yes

2024-05-30 00:00 UTC


Timestamps

2024-05-30

2024-05-30


Scope

KEV entry: Check Point Quantum Security Gateways Information Disclosure Vulnerability | Affected: Check Point / Quantum Security Gateways | Description: Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances. | Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. | Due date: 2024-06-20 | Known ransomware campaign use (KEV): Known | Notes (KEV): https://support.checkpoint.com/results/sk/sk182336 ; https://nvd.nist.gov/vuln/detail/CVE-2024-24919


References
  • {'id': 'CVE-2024-24919', 'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-24919'}

38c886fd-5d10-4dc0-b60f-65d5d1336dcc

405284c2-e461-4670-8979-7fd2c9755a60

2026-02-02 12:26 UTC

2026-02-02 12:26 UTC

Evidence (1)
Type Source Signal Confidence Details GCVE Metadata
vendor_report cisa-kev successful_exploitation 0.80
View details
{
  "cwes": [
    "CWE-200"
  ],
  "date_added": "2024-05-30",
  "due_date": "2024-06-20",
  "feed": "CISA Known Exploited Vulnerabilities Catalog",
  "knownRansomwareCampaignUse": "Known",
  "product": "Quantum Security Gateways",
  "vendorProject": "Check Point",
  "vulnerabilityName": "Check Point Quantum Security Gateways Information Disclosure Vulnerability"
}
-