information disclosure in Check Point VPN products (CVE-2024-24919) #shorts #breaking

CVE

This video focuses on CVE-2024-24919, a critical information disclosure vulnerability in Check Point VPN products. Discovered just this month, it is currently classified as a zero-day vulnerability. Exploitation details are yet unknown, but those affected are users of Check Point Quantum Gateway, Spark Gateway, and CloudGuard Network, particularly those using Remote Access VPN or Mobile Access Software Blades. If exploited, hackers could potentially read sensitive information on the affected Check Point Security Gateways.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://support.checkpoint.com/results/sk/sk182336
• [2025-04-25] Report on exploitation attempt of CVE-2024-24919 on Check Point Security Gateways.