Information disclosure in Check Point Quantum Gateway, Spark Gateway and CloudGuard…
Priority CRITICAL 94Exploited in the wildCWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.
Summary
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Why it matters now
Exploitation Active In CISA KEV since 2024-05-30CISA due date 2024-06-20Known ransomware use
EPSS 0.99978 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Check Point | Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. | — | No fix listed | CNA |
- Check Point Quantum Gateway, Spark Gateway and CloudGuard Network VendorCheck Point Affected Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.40:*:*:*:*:*:*:* | r80.40 | Vulnerable | Check Point |
| cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:o:checkpoint:quantum_spark_firmware:r81:*:*:*:*:*:*:* | r81 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:* | r80.40 | Vulnerable | Check Point |
| cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Check Point |
| cpe:2.3:a:checkpoint:cloudguard_network_security:r80.40:*:*:*:*:*:*:* | r80.40 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:cloudguard_network_security:r81:*:*:*:*:*:*:* | r81 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:cloudguard_network_security:r81.10:*:*:*:*:*:*:* | r81.10 | Vulnerable | Check Point |
| cpe:2.3:a:checkpoint:cloudguard_network_security:r81.20:*:*:*:*:*:*:* | r81.20 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.20:*:*:*:*:*:*:* | r81.20 | Vulnerable | Check Point |
- cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.40:*:*:*:*:*:*:* Versions r80.40 Vulnerable ·Check Point
- cpe:2.3:h:checkpoint:quantum_spark:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:o:checkpoint:quantum_spark_firmware:r81:*:*:*:*:*:*:* Versions r81 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:* Versions r80.40 Vulnerable ·Check Point
- cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Check Point
- cpe:2.3:a:checkpoint:cloudguard_network_security:r80.40:*:*:*:*:*:*:* Versions r80.40 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:cloudguard_network_security:r81:*:*:*:*:*:*:* Versions r81 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:cloudguard_network_security:r81.10:*:*:*:*:*:*:* Versions r81.10 Vulnerable ·Check Point
- cpe:2.3:a:checkpoint:cloudguard_network_security:r81.20:*:*:*:*:*:*:* Versions r81.20 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.20:*:*:*:*:*:*:* Versions r81.20 Vulnerable ·Check Point
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.10:*:*:*:*:*:*:* | r81.10 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:* | r81 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:quantum_spark_firmware:r81.10:*:*:*:*:*:*:* | r81.10 | Vulnerable | Check Point |
| cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.20:*:*:*:*:*:*:* | r80.20 | Vulnerable | Check Point |
- cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81.10:*:*:*:*:*:*:* Versions r81.10 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:* Versions r81 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:quantum_spark_firmware:r81.10:*:*:*:*:*:*:* Versions r81.10 Vulnerable ·Check Point
- cpe:2.3:o:checkpoint:quantum_spark_firmware:r80.20:*:*:*:*:*:*:* Versions r80.20 Vulnerable ·Check Point
Remediation
No fixed version listed by the sources yet.
Timeline
- 2024-05-30 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2024-24919
References
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences