PT-2024-3801 · Check Point · Check Point Quantum Spark Appliances+5
CVE-2024-24919
·
Published
2024-05-26
·
Updated
2026-07-24
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
CloudGuard Network (affected versions not specified)
Quantum Maestro (affected versions not specified)
Quantum Scalable Chassis (affected versions not specified)
Quantum Security Gateways (affected versions not specified)
Quantum Spark Appliances (affected versions not specified)
Description
An information disclosure issue exists in Check Point Security Gateways configured with Remote Access VPN or Mobile Access Software Blades. This flaw allows an unauthenticated remote attacker to read the content of arbitrary files on the affected device, such as the
/etc/shadow file containing password hashes for local accounts, including those used for Active Directory connections. Attackers can then crack these hashes to obtain passwords and gain unauthorized access if password-only authentication is enabled. Approximately 65,000 vulnerable hosts were identified across Fofa and Shodan. Real-world exploitation has been observed since April 2024, including attacks by the NailaoLocker ransomware group targeting European healthcare organizations. In these incidents, attackers extracted ntds.dit files to steal Active Directory data for lateral movement within victim networks and used Visual Studio code for tunneling malicious traffic.Recommendations
Update affected systems to the fixed version provided by the vendor.
Remove all local users on vulnerable security gateways.
Change passwords and accounts used for LDAP connections from the gateway to Active Directory.
Update Check Point IPS signatures to detect exploitation attempts.
Conduct log reviews for signs of compromise after applying the fix.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Check Point Cloudguard Network
Check Point Gaia
Check Point Quantum Maestro
Check Point Quantum Scalable Chassis
Check Point Quantum Spark Appliances
Check Point Security Gateway