Description
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| checkpoint | Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Check Point Security Gateway Arbitrary File Read
auxiliary/gather/checkpoint_gateway_fileread_cve_2024_24919
GitHub 57 repositories · most starred shown
-
seed1337/CVE-2024-24919-POC ★ 48 · May 31, 2024
-
ifconfig-me/CVE-2024-24919-Bulk-Scanner ★ 31 · Jun 1, 2024
CVE-2024-24919 [Check Point Security Gateway Information Disclosure]
-
RevoltSecurities/CVE-2024-24919 ★ 25 · May 31, 2024
An Vulnerability detection and Exploitation tool for CVE-2024-24919
-
GoatSecurity/CVE-2024-24919 ★ 20 · May 31, 2024
CVE-2024-24919 exploit
-
un9nplayer/CVE-2024-24919 ★ 16 · May 31, 2024
This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID: CVE-20…
-
0nin0hanz0/CVE-2024-24919-PoC ★ 12 · Jun 3, 2024
-
LucasKatashi/CVE-2024-24919 ★ 12 · May 30, 2024
CVE-2024-24919 Exploit PoC
-
verylazytech/CVE-2024-24919 ★ 9 · Jun 9, 2024
POC - CVE-2024–24919 - Check Point Security Gateways
-
c3rrberu5/CVE-2024-24919 ★ 7 · May 30, 2024
Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN.
-
geniuszly/CVE-2024-24919 ★ 6 · Sep 29, 2024
PoC script for CVE-2024-24919 vulnerability. It scans a list of target URLs to identify security issues by sending HTTP POST requests and analyzing server responses
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Check Point Quantum Gateway - Information Disclosure http/cves/2024/CVE-2024-24919.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 2
- WID-SEC-2024-1261 Check Point Security Gateway: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jun 26, 2024
- NCSC-2024-0238 Kwetsbaarheid verholpen in Check Point VPN producten NCSC-NL (Netherlands) · May 30, 2024