virus logo Outbreak Alert

Check Point Quantum Security Gateways Information Disclosure Attack

Released: May 31, 2024

Updated: Jun 05, 2024

Download PDF »

Check Point Information Disclosure Attack Tags

High Severity

Check Point Vendor

Watch Video

Subscribe

Actively Targeted in the Wild

Attackers exploit a zero-day vulnerability affecting Check Point Security Gateways to gain remote access. The vulnerability can allow attackers to read sensitive information on Check Point Security Gateways enabled with remote Access VPN or Mobile Access Software Blades. Learn More »

Common Vulnerabilities and Exposures


Background

The vulnerability CVE-2024-24919 allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance, including disclosing the password hashes for local accounts. Weak passwords can be compromised, leading to further misuse and potential lateral movement within the network. Check Point mentioned in the advisory that the exploitation attempts were seen as early as April 7, 2024.

Click here to analyze the

Real-Time Threat Map

Latest Development

Recent news and incidents related to cybersecurity threats encompassing various events such as data breaches, cyber-attacks, security incidents, and vulnerabilities discovered.


FortiGuard recommends users to apply the emergency hotfix provided and follow instructions as mentioned on the vendor’s advisory. All the known IoCs involved in the campaign are blocked by Web Filtering and IOC service. FortiGuard Labs is continously monitoring the situation and as new information becomes available this report will be updated accordingly.

Attack Sequence

Actions taken by cyber attacker or a malicious entity to compromise a target system or network.

FortiGuard Cybersecurity Framework

Mitigate security threats and vulnerabilities by leveraging the range of FortiGuard Services.


PROTECT

  • Lure

  • Decoy VM

  • IPS

  • Web App Security

  • IoT/IIoT Virtual Patch

DETECT

  • IOC

  • Outbreak Detection

  • Threat Hunting

  • Playbook

RESPOND

  • Automated Response

  • Assisted Response Services

RECOVER

  • NOC/SOC Training

  • End-User Training

IDENTIFY

  • Attack Surface Hardening

  • Business Reputation

  • Attack Surface Monitoring (Inside & Outside)

Threat Intelligence

Information gathered from analyzing ongoing cybersecurity events including threat actors, their tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), malware and related vulnerabilities.