CVE-2024-24919
Information disclosure
KEV RANSOMWAREHIGH 8.6EPSS 100.0%
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
- Affected
- checkpoint · Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
- CVSS v3.1 NVD
- 8.6 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - EPSS
- 99.98% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2024-05-30, used in ransomware campaigns
- Nuclei
- high · CWE-200
- Published
- 2024-05-28
- Updated
- 2026-08-05
Proof-of-concept exploits (53)
- 0nin0hanz0/CVE-2024-24919-PoC12★ · 2024-07-27
- 0x3f3c/CVE-2024-249191★ · 2024-06-01
- 0xYumeko/CVE-2024-249191★ · 2024-06-01
- 0xans/CVE-2024-249191★ · 2024-06-19
- 0xkalawy/CVE-2024-249190★ · 2024-05-31
- Bytenull00/CVE-2024-249193★ · 2024-05-30
- Cappricio-Securities/CVE-2024-249192★ · 2024-06-24
- CyberBibs/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-0★ · 2025-06-09
- CyberBibs/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation…0★ · 2025-06-08
- Expl0itD0g/CVE-2024-24919---Poc0★ · 2024-06-02
- GlobalsecureAcademy/CVE-2024-249193★ · 2024-05-31
- GoatSecurity/CVE-2024-2491920★ · 2024-05-31
- GuayoyoCyber/CVE-2024-249194★ · 2024-06-04
- H3KEY/CVE-2024-249190★ · 2024-07-22
- J4F9S5D2Q7/CVE-2024-24919-CHECKPOINT0★ · 2024-06-02
- Jutrm/cve-2024-249190★ · 2024-07-26
- LucasKatashi/CVE-2024-2491912★ · 2024-05-30
- LuisMateo1/Arbitrary-File-Read-CVE-2024-249190★ · 2025-04-01
- MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-Exploitation0★ · 2025-07-12
- MohamedWagdy7/CVE-2024-249190★ · 2024-05-31
- P3wc0/CVE-2024-249190★ · 2024-05-31
- RevoltSecurities/CVE-2024-2491925★ · 2024-06-05
- Rug4lo/CVE-2024-24919-Exploit3★ · 2024-06-03
- SalehLardhi/CVE-2024-249191★ · 2024-06-11
- Tim-Hoekstra/CVE-2024-249190★ · 2024-06-04
- Vulnpire/CVE-2024-249190★ · 2024-05-31
- YN1337/CVE-2024-249190★ · 2024-06-01
- am-eid/CVE-2024-249190★ · 2024-05-31
- bigb0x/CVE-2024-24919-Sniper3★ · 2024-06-02
- c3rrberu5/CVE-2024-249197★ · 2024-05-30
- emanueldosreis/CVE-2024-249195★ · 2024-05-30
- fernandobortotti/CVE-2024-249191★ · 2024-06-01
- funixone/CVE-2024-24919---Exploit-Script1★ · 2025-02-21
- geniuszly/CVE-2024-249196★ · 2024-09-29
- geniuszlyy/CVE-2024-249196★ · 2024-09-29
- hendprw/CVE-2024-249190★ · 2024-05-30
- mr-kasim-mehar/CVE-2024-24919-Exploit1★ · 2024-06-02
- nexblade12/CVE-2024-249191★ · 2024-05-31
- nullcult/CVE-2024-24919-Exploit0★ · 2024-06-07
- r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN2★ · 2024-06-01
- sar-3mar/CVE-2024-24919_POC0★ · 2024-10-28
- satchhacker/cve-2024-249190★ · 2024-06-08
- satriarizka/CVE-2024-249191★ · 2024-05-31
- seed1337/CVE-2024-24919-POC47★ · 2024-05-31
- smackerdodi/CVE-2024-24919-nuclei-templater5★ · 2024-05-31
- spider00009/CVE-2024-24919-POC0★ · 2025-02-26
- starlox0/CVE-2024-24919-POC1★ · 2024-06-06
- un9nplayer/CVE-2024-2491916★ · 2024-06-05
- verylazytech/CVE-2024-249199★ · 2024-11-26
- zam89/CVE-2024-249194★ · 2024-05-31
- SpiX-7/CVE-2024-24919-POC0★ · 2025-02-26
- f-marra/LetsDefend0★ · 2026-06-27
- numencyber/Vulnerability_PoC332★ · 2026-04-06
Nuclei templates (1)
Metasploit modules (1)
Security advisories
- https://support.checkpoint.com/results/sk/sk182336
- https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerabili…