Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled…
CVE-2024-24919 Exploited
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
Being exploited in the wild
Catalogued 30 May 2024 · US federal remediation deadline 20 June 2024 · Known use in ransomware campaigns
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Exploit code is also public: Metasploit · Public PoC · Nuclei template
- Metasploitauxiliary/gather/checkpoint_gateway_fileread_cve_2024_24919
- NucleiCheck Point Quantum Gateway - Information Disclosure
- Public PoCseed1337/CVE-2024-24919-POC47 stars
- Public PoCifconfig-me/CVE-2024-24919-Bulk-Scanner31 stars
- Public PoCRevoltSecurities/CVE-2024-2491925 stars
- Public PoCGoatSecurity/CVE-2024-2491920 stars
- Public PoCun9nplayer/CVE-2024-2491916 stars
- Public PoCLucasKatashi/CVE-2024-2491912 stars
- Public PoC0nin0hanz0/CVE-2024-24919-PoC12 stars
- Public PoCverylazytech/CVE-2024-249199 stars
Assessment
- CVSS
- 8.6 (v3.1)
- Severity
- High
- EPSS
- 99.98% chance of exploitation in the next 30 days
- Known exploited
- Yes — listed in the CISA KEV catalog
- Exploit availability
- CISA KEV, Metasploit, Public PoC, Nuclei template
- Published
- 28 May 2024
- Last updated
- 5 August 2026
- Affected
- Check Point · checkpoint · Check Point Quantum Gateway, Spark Gateway and CloudGuard Network · Quantum Security Gateways
- Weakness
- CWE-200
- Assigner
- cve@checkpoint.com
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
At the source
References
- https://support.checkpoint.com/results/sk/sk182336
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919
- https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Community proofs of concept
No community proof of concept yet. If you have one for a published vulnerability and the right to share it, add it below — it will appear here once reviewed.
Submit a proof of concept
Only for publicly disclosed vulnerabilities, and only material from testing you were authorised to perform. This platform does not buy, sell, or broker exploits — see earning from vulnerability research for legitimate bounty programs. Submissions are reviewed before they appear. Text only; do not include live credentials, personal data, or anything targeting systems you are not permitted to test.
Query this programmatically
Agents can read this through the MCP endpoint, or over HTTP:
curl https://cve.zerocrew.in/api/cve/CVE-2024-24919