The vulnerability of Check Point Quantum Gateway and Check Point Spark, part of the comprehensive security system CloudGuard Network, stems from the lack of protection for operational data. This allows attackers to gain access to the protected information.

🗓️ 29 May 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerability in Check Point Quantum Gateway and Spark in CloudGuard Network exposes data remotely.

Reporter	Title	Published	Views	Family All 89
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	2 Jun 202408:19	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	10 Jun 202401:29	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	31 May 202408:01	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	29 Sep 202408:20	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	31 May 202411:29	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	3 Jun 202418:17	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	31 May 202401:14	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	31 May 202410:18	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	31 May 202401:14	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware	2 Jun 202406:17	–	githubexploit

Source	Link
support	www.support.checkpoint.com/results/sk/sk182336
advisories	www.advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0353.html
vuldb	www.vuldb.com/ru/
bleepingcomputer	www.bleepingcomputer.com/news/security/check-point-releases-emergency-fix-for-vpn-zero-day-exploited-in-attacks/
web	www.web.nvd.nist.gov/view/vuln/detail

29 May 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 37.5

CVSS 27.8

EPSS0.99978

check point quantum gateway spark cloudguard network operational data remote access