CVE-2024-24919—Check Point Quantum Security Gateways Information Disclosure Vulnerability

漏洞名称

Check Point Quantum Security Gateways Information Disclosure Vulnerability

描述

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://support.checkpoint.com/results/sk/sk182336
• https://nvd.nist.gov/vuln/detail/CVE-2024-24919

相关新闻文章

• FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. OrganizationsAugust 26, 2026
• CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-dayJune 9, 2026
• Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt StrikeSeptember 24, 2025
• China-Linked Attackers Exploit Check Point Flaw to Deploy ShadowPad and RansomwareFebruary 20, 2025
• New NailaoLocker ransomware used against EU healthcare orgsFebruary 20, 2025

相关 CWE

• CWE-200