CVE Feed
8.6 High

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled…

CVE-2024-24919 Exploited

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

Being exploited in the wild

Catalogued 30 May 2024 · US federal remediation deadline 20 June 2024 · Known use in ransomware campaigns

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Exploit code is also public: Metasploit · Public PoC · Nuclei template

Assessment

CVSS
8.6 (v3.1)
Severity
High
EPSS
99.98% chance of exploitation in the next 30 days
Known exploited
Yes — listed in the CISA KEV catalog
Exploit availability
CISA KEV, Metasploit, Public PoC, Nuclei template
Published
28 May 2024
Last updated
5 August 2026
Weakness
CWE-200
Assigner
cve@checkpoint.com

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

At the source

References

Community proofs of concept

No community proof of concept yet. If you have one for a published vulnerability and the right to share it, add it below — it will appear here once reviewed.

Submit a proof of concept
Before you submit *

Query this programmatically

Agents can read this through the MCP endpoint, or over HTTP:

curl https://cve.zerocrew.in/api/cve/CVE-2024-24919