Exploited vulnerability · CISA KEV

Is CVE-2024-24919 exploited? Yes: in CISA KEV since 30 May 2024

Gociux · Check Point Quantum Security Gateways · data: CISA KEV, CVE record, FIRST EPSS

Yes. CVE-2024-24919, Check Point Quantum Security Gateways Information Disclosure Vulnerability, is being exploited in the wild. CISA added it to its Known Exploited Vulnerabilities catalog on 30 May 2024, 2 days after it was published. It is known to be used in ransomware campaigns. It affects Check Point Quantum Security Gateways, an internet-facing product of the kind attackers use for initial access. If you run it, CISA's required action is: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

What it is

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

What to do

1. Check whether you run it. Look for Quantum Security Gateways in your asset inventory, including appliances and cloud images. Stack check lists every exploited Check Point CVE at once.
2. Apply the fix. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
3. If you can't patch today, take the affected service off the internet or restrict who can reach it, and check its logs for signs of compromise since 28 May 2024.
4. Get told next time. Email alerts when CISA adds a CVE for Check Point.

References

• support.checkpoint.com/results/sk/sk182336
• nvd.nist.gov/vuln/detail/CVE-2024-24919

Sources: CISA KEV (exploitation, ransomware use, required action, due date), the CVE record (publication date, CVSS, CNA), NVD and FIRST EPSS (live score). More: all KEV additions in May 2024 · Check Point scorecard · act-now radar.