CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Date: Jun 06, 2024 Investigation Type: Web Attack Platform: LetsDefend Rule Triggered: SOC287 – Arbitrary File Read Detected CVE: CVE-2024-24919 Severity: High Impact: Unauthorized access to sensitive system files via...

CVE-2024-24919

Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Overview This repository contains a tool for exploiting the CVE-2024-24919 vulnerability in Check Point Security Gateways. The tool is a multi-scanner that can identify vulnerable devices and a single-target exploit that can take full...

CVE-2024-24919-Sniper

CVE-2024-24919-Sniper Overview CVE-2024-24919 Sniper is a Python script designed to scan for Check Point Security Gateway Information Disclosure vulnerabilities. This script can perform both single-target and bulk scanning, utilizing multithreading to improve scanning speed. It supports various...

Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation

Incident Analysis: Check Point Security Gateway CVE-2024-24919 Exploitation Attempt 📌 Executive Summary On June 6, 2024, at 03:12 PM, security monitoring systems triggered an alert for a high-severity exploit attempt targeting a Check Point Security Gateway CP-Spark-Gateway-01, IP: 172.16.20.146...

CVE-2024-24919_POC

CVE-2024-24919POC It's Proof of Concept on CVE-2024-24919-POC , i made it after it's discoverd CVE-2024-24919 Checkpoint security gateway information disclosure vulnerability . U can see it in Notion-CVE-2024-24919POC Shodan dork: title:"Check Point" "Server: Check Point SVN" "X-UA-Compatible:...

Detecting-and-Analyzing-CVE-2024-24919-Exploitation

🔍 Investigating a Zero-Day Attack Using Let’s Defend SIEM 👉 A Walkthrough on Detecting and Analyzing CVE-2024-24919 Exploitation 🎯 Purpose of the Investigation This project was conducted to investigate a potential exploitation attempt against a Check Point Security Gateway, specifically leveragin...

CVE-2024-24919---Poc

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read about it - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. Description Potentially allowing an...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC Alert Analysis: Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Introduction CVE-2024-24919 is a critical zero-day vulnerability in Check Point Security Gateways that allows unauthenticated remote attackers to read arbitrary files from affected systems. Discovered in May 202...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 è una vulnerabilità di lettura arbitraria di file non autenticata che può essere considerata niente di meno che una RCE completa non autenticata. Un attaccante può leggere qualsiasi file sensibile situato sull'appliance interessata con...

Check Point Security Gateway 安全漏洞

Check Point Security Gateway is a series of network security gateway devices developed by Check Point in Israel. There is a security vulnerability in Check Point Security Gateway, which stems from an input processing issue in the UserCheck Web Portal during the DLP activation process. This...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919POC It's Proof of Concept on CVE-2024-24919-POC...

The vulnerability of Check Point Security Gateway’s security gateway, related to resource release errors, allows attackers to trigger a service failure.

The vulnerability of Check Point Security Gateway relates to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by redirecting users to the UserCheck page...