DLL-HiJacking in Check Point SmartConsole
Priority MEDIUM 41CWE-427Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.
Summary
Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02736 86th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Check Point | Check Point SmartConsole | Check Point SmartConsole versions R81.10, R81.20 | — | No fix listed | CNA |
- Check Point SmartConsole VendorCheck Point Affected Check Point SmartConsole versions R81.10, R81.20 Fixed in — No fix listed CNA
CPE configurations NVD · 27
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build400:*:*:*:*:*:* | r81.10 build400 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build402:*:*:*:*:*:* | r81.10 build402 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build404:*:*:*:*:*:* | r81.10 build404 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build406:*:*:*:*:*:* | r81.10 build406 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build407:*:*:*:*:*:* | r81.10 build407 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build409:*:*:*:*:*:* | r81.10 build409 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build410:*:*:*:*:*:* | r81.10 build410 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build412:*:*:*:*:*:* | r81.10 build412 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build413:*:*:*:*:*:* | r81.10 build413 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build414:*:*:*:*:*:* | r81.10 build414 | Vulnerable | Check Point |
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build400:*:*:*:*:*:* Versions r81.10 build400 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build402:*:*:*:*:*:* Versions r81.10 build402 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build404:*:*:*:*:*:* Versions r81.10 build404 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build406:*:*:*:*:*:* Versions r81.10 build406 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build407:*:*:*:*:*:* Versions r81.10 build407 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build409:*:*:*:*:*:* Versions r81.10 build409 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build410:*:*:*:*:*:* Versions r81.10 build410 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build412:*:*:*:*:*:* Versions r81.10 build412 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build413:*:*:*:*:*:* Versions r81.10 build413 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build414:*:*:*:*:*:* Versions r81.10 build414 Vulnerable ·Check Point
Show 17 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build416:*:*:*:*:*:* | r81.10 build416 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build417:*:*:*:*:*:* | r81.10 build417 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build418:*:*:*:*:*:* | r81.10 build418 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build420:*:*:*:*:*:* | r81.10 build420 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build423:*:*:*:*:*:* | r81.10 build423 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build424:*:*:*:*:*:* | r81.10 build424 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.10:build425:*:*:*:*:*:* | r81.10 build425 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build640:*:*:*:*:*:* | r81.20 build640 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build641:*:*:*:*:*:* | r81.20 build641 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build645:*:*:*:*:*:* | r81.20 build645 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build646:*:*:*:*:*:* | r81.20 build646 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build649:*:*:*:*:*:* | r81.20 build649 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build651:*:*:*:*:*:* | r81.20 build651 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build653:*:*:*:*:*:* | r81.20 build653 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build654:*:*:*:*:*:* | r81.20 build654 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:smartconsole:r81.20:build655:*:*:*:*:*:* | r81.20 build655 | Vulnerable | Check Point |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build416:*:*:*:*:*:* Versions r81.10 build416 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build417:*:*:*:*:*:* Versions r81.10 build417 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build418:*:*:*:*:*:* Versions r81.10 build418 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build420:*:*:*:*:*:* Versions r81.10 build420 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build423:*:*:*:*:*:* Versions r81.10 build423 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build424:*:*:*:*:*:* Versions r81.10 build424 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.10:build425:*:*:*:*:*:* Versions r81.10 build425 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build640:*:*:*:*:*:* Versions r81.20 build640 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build641:*:*:*:*:*:* Versions r81.20 build641 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build645:*:*:*:*:*:* Versions r81.20 build645 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build646:*:*:*:*:*:* Versions r81.20 build646 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build649:*:*:*:*:*:* Versions r81.20 build649 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build651:*:*:*:*:*:* Versions r81.20 build651 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build653:*:*:*:*:*:* Versions r81.20 build653 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build654:*:*:*:*:*:* Versions r81.20 build654 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:smartconsole:r81.20:build655:*:*:*:*:*:* Versions r81.20 build655 Vulnerable ·Check Point
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-24916
- 2026-10-03 Alias added: GHSA-q4pq-qx89-48vq
References
More Check Point Smartconsole vulnerabilities
- TI-2020-04924 Improper privilege management in Check Point SmartConsole CVSS 3.1HIGH 7.8
- TI-2024-16424 SmartConsole Sensitive Credential Exposure via Memory Dump CVSS 3.1HIGH 7.2
Sources
- CVE-2024-24916 · CVE Program
- CVE-2024-24916 · NVD
- FIRST EPSS
- GHSA-q4pq-qx89-48vq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences