Lucene search

K
cisa_kevCISACISA-KEV-CVE-2024-24919
HistoryMay 30, 2024 - 12:00 a.m.

Check Point Quantum Security Gateways Information Disclosure Vulnerability

2024-05-3000:00:00
CISA
www.cisa.gov
8
check point
quantum security gateways
information disclosure
vulnerability
ipsec vpn
remote access vpn
mobile access
cloudguard network
scalable chassis
spark appliances

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.945

Percentile

99.3%

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.945

Percentile

99.3%