目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2024-24919— Check Point Security Gateways 安全漏洞

CVSS 8.6 · High KEV · ランサムウェア EPSS 94.34% · P100
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2024-24919の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
Information disclosure
ソース: NVD (National Vulnerability Database)
脆弱性説明
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
信息暴露
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Check Point Security Gateways 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Check Point Security Gateways是以色列Check Point公司的一个人工智能驱动的 NGFW 安全网关。 Check Point Security Gateways 存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

Shenlong 10 Questions — AI 深度分析

十问解析：根本原因、利用方式、修复建议、紧迫性。摘要免费，完整版需登录。

查看摘要 完整分析（登录）

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
checkpointCheck Point Quantum Gateway, Spark Gateway and CloudGuard Network Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. -

II. CVE-2024-24919の公開POC

#POC説明ソースリンクShenlongリンク
1Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN.https://github.com/c3rrberu5/CVE-2024-24919POC詳細
2POC exploit for CVE-2024-24919 information leakage https://github.com/emanueldosreis/CVE-2024-24919POC詳細
3Nonehttps://github.com/hendprw/CVE-2024-24919POC詳細
4CVE-2024-24919 Exploit PoChttps://github.com/LucasKatashi/CVE-2024-24919POC詳細
5Nonehttps://github.com/eoslvs/CVE-2024-24919POC詳細
6Quick and simple script that takes as input a file with multiple URLs to check for the CVE-2024-24919 vulnerability in CHECKPOINThttps://github.com/Bytenull00/CVE-2024-24919POC詳細
7Nonehttps://github.com/am-eid/CVE-2024-24919POC詳細
8Nonehttps://github.com/pewc0/CVE-2024-24919POC詳細
9Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability (Wrong Check Point)https://github.com/zam89/CVE-2024-24919POC詳細
10A simple bash and python script to check for the vulnerability CVE-2024-24919https://github.com/satriarizka/CVE-2024-24919POC詳細
11CLI based PoC for CVE-2024-24919https://github.com/3UR/CVE-2024-24919POC詳細
12An Vulnerability detection and Exploitation tool for CVE-2024-24919https://github.com/RevoltSecurities/CVE-2024-24919POC詳細
13Nonehttps://github.com/Vulnpire/CVE-2024-24919POC詳細
14Nonehttps://github.com/seed1337/CVE-2024-24919-POCPOC詳細
15Nonehttps://github.com/0x3f3c/CVE-2024-24919POC詳細
16Nonehttps://github.com/Praison001/CVE-2024-24919-Check-Point-Remote-Access-VPNPOC詳細
17Nuclei template for CVE-2024-24919 https://github.com/smackerdodi/CVE-2024-24919-nuclei-templaterPOC詳細
18CVE-2024-24919 exploithttps://github.com/GoatSecurity/CVE-2024-24919POC詳細
19Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNshttps://github.com/GlobalsecureAcademy/CVE-2024-24919POC詳細
20Nonehttps://github.com/nexblade12/CVE-2024-24919POC詳細
21This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID: CVE-2024-24919https://github.com/un9nplayer/CVE-2024-24919POC詳細
22Nonehttps://github.com/MohamedWagdy7/CVE-2024-24919POC詳細
23Check Point Security Gateway (LFI)https://github.com/Cappricio-Securities/CVE-2024-24919POC詳細
24Nonehttps://github.com/fernandobortotti/CVE-2024-24919POC詳細
25Nonehttps://github.com/nicolvsrlr27/CVE-2024-24919POC詳細
26Nonehttps://github.com/gurudattch/CVE-2024-24919POC詳細
27Mass scanner for CVE-2024-24919https://github.com/YN1337/CVE-2024-24919POC詳細
28CVE-2024-24919 [Check Point Security Gateway Information Disclosure]https://github.com/ifconfig-me/CVE-2024-24919-Bulk-ScannerPOC詳細
29Esta herramienta se utiliza para validar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewallhttps://github.com/r4p3c4/CVE-2024-24919-Checkpoint-Firewall-VPN-CheckPOC詳細
30Herramienta de explotación para explotar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewallhttps://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPNPOC詳細
31Nonehttps://github.com/J4F9S5D2Q7/CVE-2024-24919POC詳細
32Nonehttps://github.com/mr-kasim-mehar/CVE-2024-24919-ExploitPOC詳細
33Nonehttps://github.com/B1naryo/CVE-2024-24919-POCPOC詳細
34a Proof of Concept of CVE-2024-24919https://github.com/Expl0itD0g/CVE-2024-24919---PocPOC詳細
35CVE-2024-24919 Sniper - A powerful tool for scanning Check Point Security Gateway CVE-2024-24919 vulnerability. Supports single & bulk scanning, multithreading, and generates detailed CSV reports. Ideal for penetration testers and security researchers.https://github.com/bigb0x/CVE-2024-24919-SniperPOC詳細
36Nonehttps://github.com/birdlex/cve-2024-24919-checkerPOC詳細
37 CVE-2024-24919 Exploit and PoC - Critical LFI for Remote Access VPN or Mobile Access.https://github.com/Rug4lo/CVE-2024-24919-ExploitPOC詳細
38Nonehttps://github.com/0nin0hanz0/CVE-2024-24919-PoCPOC詳細
39Nmap script to check vulnerability CVE-2024-24919https://github.com/GuayoyoCyber/CVE-2024-24919POC詳細
40Nonehttps://github.com/0xans/CVE-2024-24919POC詳細
41Nonehttps://github.com/Tim-Hoekstra/CVE-2024-24919POC詳細
42A Simple Exploit Code(POC) to Automate CVE-2024–24919https://github.com/starlox0/CVE-2024-24919-POCPOC詳細
43CVE-2024-24919 exploit that checks more files for better visibilityhttps://github.com/nullcult/CVE-2024-24919-ExploitPOC詳細
44Nonehttps://github.com/satchhacker/cve-2024-24919POC詳細
45Nonehttps://github.com/P3wc0/CVE-2024-24919POC詳細
46Nonehttps://github.com/J4F9S5D2Q7/CVE-2024-24919-CHECKPOINTPOC詳細
47POC - CVE-2024–24919 - Check Point Security Gatewayshttps://github.com/verylazytech/CVE-2024-24919POC詳細
48Python script to automate the process of finding vulnerable sites for CVE-2024-24919.https://github.com/protonnegativo/CVE-2024-24919POC詳細
49Nonehttps://github.com/SalehLardhi/CVE-2024-24919POC詳細
50Nonehttps://github.com/ShadowByte1/CVE-2024-24919POC詳細
51Hello everyone, I am sharing a modified script from CVE-2024-24919 which can extract paths categorized as critical.https://github.com/H3KEY/CVE-2024-24919POC詳細
52Nonehttps://github.com/Jutrm/cve-2024-24919POC詳細
53Nonehttps://github.com/smkxt1/CVE-2024-24919POC詳細
54Nonehttps://github.com/yagyuufellinluvv/CVE-2024-24919POC詳細
55Nonehttps://github.com/LuisMateo1/Arbitrary-File-Read-CVE-2024-24919POC詳細
56🔍 Just wrapped up an incident report on a Phishing Alert (Event ID 257, SOC282). Enhancing my expertise in email threat detection and response! 🚨 #Cybersecurity #SOCAnalyst #LetsDefendhttps://github.com/AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-POC詳細
57Nonehttps://github.com/0xYumeko/CVE-2024-24919POC詳細
58PoC script for CVE-2024-24919 vulnerability. It scans a list of target URLs to identify security issues by sending HTTP POST requests and analyzing server responseshttps://github.com/geniuszlyy/CVE-2024-24919POC詳細
59Nonehttps://github.com/skyrowalker/CVE-2024-24919POC詳細
60Nonehttps://github.com/0xkalawy/CVE-2024-24919POC詳細
61It's Proof of Concept on CVE-2024-24919-POC , i made it after it's discoverd https://github.com/sar-3mar/CVE-2024-24919_POCPOC詳細
62Check-Point安全网关任意文件读取漏洞(CVE-2024-24919)https://github.com/NingXin2002/Check-Point_pocPOC詳細
63PoC script for CVE-2024-24919 vulnerability. It scans a list of target URLs to identify security issues by sending HTTP POST requests and analyzing server responseshttps://github.com/geniuszly/CVE-2024-24919POC詳細
64CVE-2024-24919 exploit that checks more files for better visibilityhttps://github.com/ronniensale/CVE-2024-24919-ExploitPOC詳細
65SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]https://github.com/drake044/SOC_287POC詳細
66SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]https://github.com/hashdr1ft/SOC_287POC詳細
67Nonehttps://github.com/funixone/CVE-2024-24919---Exploit-ScriptPOC詳細
68Nonehttps://github.com/spider00009/CVE-2024-24919-POCPOC詳細
69Nonehttps://github.com/0xlf/CVE-2024-24919POC詳細
70Nonehttps://github.com/ejaboz/cve-2024-24919POC詳細
71Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24919.yamlPOC詳細
72Nonehttps://github.com/zxcod3/CVE-2024-24919POC詳細
73Nonehttps://github.com/CyprianAtsyor/CVE-2024-24919-Incident-Report.mdPOC詳細
74Nonehttps://github.com/CyberBibs/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-POC詳細
75Nonehttps://github.com/MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-ExploitationPOC詳細
76Nonehttps://github.com/SpiX-7/CVE-2024-24919-POCPOC詳細
77Nonehttps://github.com/0zerobyte/CVE-2024-24919POC詳細
78Nonehttps://github.com/voidbroker/CVE-2024-24919POC詳細
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2024-24919のインテリジェンス情報

请登录查看更多情报信息。

IV. 関連脆弱性

同じベンダー: checkpoint
同じ弱点: CWE-200

V. CVE-2024-24919へのコメント

まだコメントはありません

コメントを残す