Vulnerabilities/Check Point/CVE-2024-24919
CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability
CISA KEV entry · Last checked 30 Oct 2026, 12:10 UTC
Exploitation confirmedRansomware use knownFix: Unknown
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
Recommended action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date 20 Jun 2024 · CWE-200
Am I affected?
| Product | Affected versions | Fixed in |
|---|---|---|
| Check Point Quantum Gateway, Spark Gateway and CloudGuard Network | Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. | Unknown |
| quantum_security_gateway_firmware | r80.40 | Unknown |
| quantum_security_gateway_firmware | r81 | Unknown |
| quantum_security_gateway_firmware | r81.10 | Unknown |
| quantum_security_gateway_firmware | r81.20 | Unknown |
Show 8 more rows
| cloudguard_network | r80.40 | Unknown |
| cloudguard_network | r81 | Unknown |
| cloudguard_network | r81.10 | Unknown |
| cloudguard_network | r81.20 | Unknown |
| quantum_spark_appliances | r80.40 | Unknown |
| quantum_spark_appliances | r81 | Unknown |
| quantum_spark_appliances | r81.10 | Unknown |
| quantum_spark_appliances | r81.20 | Unknown |
No source states a fixed version. Check the vendor advisory below.
Before you patch
Restart
See vendor guidance.Known issues
Check release notes.Verification
Confirm installed version.Timeline
- 30 May 2024 · Added to CISA KEV
- 20 Jun 2024 · CISA due date
Sources checked
| CISA KEV | 30 Oct 2026, 12:10 UTC |
| CVE List v5 | 30 Oct 2026, 12:10 UTC |
| NVD | 30 Oct 2026, 12:10 UTC |
| FIRST EPSS | 30 Oct 2026, 12:11 UTC |
Data from CISA, MITRE, NVD and FIRST. Sources and licences.