CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-05-28
Check Point Security Gateway Remote Access VPN Arbitrary File Read Vulnerability (CVE-2024-24919) Technical Advisory
[Affected Scope] Check Point Security Gateways connected to the internet with Remote Access VPN or Mobile Access Software Blades enabled
[Impact] Unauthenticated remote attackers can read sensitive system files (e.g., /etc/shadow, password hashes, configuration files), potentially leading to credential theft and full network compromise
[Mitigation] Immediately apply the official hotfix provided in Check Point Advisory sk182336, audit system logs for IoCs, and rotate all sensitive credentials