Secuno
ENNL
Book demo

CVE-2024-24919

Check Point Quantum Security Gateways Information Disclosure

8.6 HIGHActively exploited (CISA KEV)Used in ransomwareEPSS 100.0%
  1. Published28 May 2024
  2. Added to CISA KEV30 May 2024
  3. Remediation due20 Jun 2024
Actively exploited (CISA KEV)

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

Added to KEV: 30 May 2024Federal remediation due: 20 Jun 2024Used in ransomware

Description

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected products

Check Point Cloudguard Network Securityr80.40 · r81 · r81.10 · r81.20
Check Point Quantum Security Gateway Firmwarer80.40 · r81 · r81.10 · r81.20
Check Point Quantum Spark Firmwarer80.20 · r80.40 · r81 · r81.10

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-938928.1
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated…
CVE-2026-821039.6
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker…
CVE-2026-1078118.8
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0,…
CVE-2026-839438.7
Exposure of sensitive information to an unauthorized actor in Azure API Center allows…
CVE-2026-1065019.6
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1,…
CVE-2026-1064598.5
Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8,…

Frequently asked

Is CVE-2024-24919 being actively exploited?

Yes. CVE-2024-24919 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 30 May 2024. It has been used in ransomware campaigns.

How severe is CVE-2024-24919?

CVE-2024-24919 has a CVSS 3.1 base score of 8.6, rated high. EPSS estimates a 100.0% probability of exploitation.

Which products are affected by CVE-2024-24919?

Affected products include Check Point Cloudguard Network Security, Check Point Quantum Security Gateway Firmware, Check Point Quantum Spark Firmware.

How do I fix CVE-2024-24919?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-24919 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, a risk for it never ranks below high, and the update that fixes it moves to the Emergency patch lane. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.