Skip to content
Patcharo
Back to the results

Vulnerabilities

HighKEVRansomware

CVE-2024-24919 — Information disclosure

CVE-2024-24919 · Quantum Security Gateway · CVSS 8.6 · KEV

In brief

Severity · CVSS
High8.6CVSS 3.1, High
EPSS
100%
CISA KEV
Known exploited, listed since 30 May 2024
CERT-FR
No advisory or alert referenced in the catalog
Published · Modified
·
Last verified

Summary

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Weakness: CWE-200

Title, description and the vendor's statements are quoted from the CVE record; a vendor's advisory is summarised in Patcharo's words, with a link.

Affected and fixed versions

Per product and release branch, as the vendor's CVE record and official advisory state them. A fixed release is shown only when a document names it: the vendor's, or CERT-FR's for Check Point, with its source.

3 branches with a published fixed release · 1 branch without a precise fixed release

Check Point Quantum Gateway, Spark Gateway and CloudGuard Network

Source: sk182336CVE-2024-24919

  1. R81.20
    Affected versionsListed as affected, releases not specified
    First fixed releaseR81.20 JHF Take 65
    Current maintenanceTake 170Latest known on 23 Oct 2026; Check Point's notes are not read sinceCheck Point JHF catalog
    SupportApproaching end of supportSupport ends 31 May 2027Check Point life cycle policy
  2. R81.10
    Affected versionsListed as affected, releases not specified
    First fixed releaseR81.10 JHF Take 150
    Current maintenanceLast available TakeTake 192Latest known on 23 Oct 2026; Check Point's notes are not read sinceNo longer supported by Check PointCheck Point JHF catalog
    SupportEnd of lifeSupport ends 31 Mar 2026Check Point life cycle policy
  3. R81
    Affected versionsListed as affected, releases not specified
    First fixed releaseR81 JHF Take 99
    Current maintenanceNot published
    SupportEnd of lifeSupport ends 31 Oct 2024Check Point life cycle policy
  4. R80.40
    Affected versionsListed as affected, releases not specified
    First fixed releaseNot published in the sources followed
    Current maintenanceNot published
    SupportEnd of lifeSupport ends 30 Apr 2024Check Point life cycle policy

Check Point recommended release for all deployments: R82.10sk95746

Remediation

Fix available

Vendor fix

  • Quantum Gateway, Spark Gateway and CloudGuard Network R81.20R81.20 JHF Take 65

    Take 65 is the first maintenance release containing the fix. The latest maintenance release known for this branch is Take 170, as of 23 Oct 2026: Check Point's notes are not read since then, a newer Take may exist.

  • Quantum Gateway, Spark Gateway and CloudGuard Network R81.10R81.10 JHF Take 150

    Take 150 is the first maintenance release containing the fix. Last available Take: Take 192. This branch is no longer supported by Check Point.

  • Quantum Gateway, Spark Gateway and CloudGuard Network R81R81 JHF Take 99

    Take 99 is the first maintenance release containing the fix. No longer supported by Check Point.

Install your branch's current maintenance release. A branch Check Point no longer supports should move to a supported release.

Check Point recommended release for all deployments: R82.10 (sk95746).

SourceCheck Point sk182336

CISA KEV required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date:

SourceCISA KEV

Last verified 1 Oct 2026 at 12:17 UTC

Known exploitation

Added to CISA KEV on 30 May 2024

Federal remediation due date: 20 Jun 2024

Known use in ransomware campaigns

The CISA required action is shown under Remediation.

100% probability of exploitation in the next 30 days (percentile 100%).

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CERT-FR

No CERT-FR advisory or alert of the last two years references this CVE, for the vendors Patcharo covers.

Timeline

  1. Published by the source
  2. Added to CISA KEV
  3. CISA remediation due date
  4. Source record last modified
  5. EPSS score computed
  6. Last verified by Patcharo

Official sources

References

Check Point · CISA Known Exploited Vulnerabilities · NVD · FIRST EPSS · Check Point sk182336

How Patcharo reads this

Affected and fixed releases come from the vendor's structured statements and are matched against exact versions; CVSS from NVD, exploitation from CISA KEV and the vendor's own advisory, probability from FIRST EPSS. Missing data stays Unknown and never becomes Not affected.

Read the methodologyRead the guide: Check Point releases, Jumbo Hotfix Accumulators and Take numbers explained

Related vulnerabilities

Other records affecting the same products, newest first.

  • CVE-2026-85102Improper Certificate Validation in Quantum Security GatewayCriticalKEV
  • CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile AccessCriticalKEVRansomware

All Quantum Security Gateway vulnerabilitiesAll Check Point vulnerabilities