Security News > 2024 > May > Check Point Warns of Zero-Day Attacks on its VPN Gateway Products
2024-05-29 15:16
Check Point is warning of a zero-day vulnerability in its Network Security gateway products that threat actors have exploited in the wild. Tracked as CVE-2024-24919, the issue impacts CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark appliances. "The vulnerability potentially allows an attacker to read certain information on
News URL
https://thehackernews.com/2024/05/check-point-warns-of-zero-day-attacks.html
Related news
- Check Point releases emergency fix for VPN zero-day exploited in attacks (source)
- Check Point VPN zero-day exploited in attacks since April 30 (source)
- New Attack on VPNs (source)
- New attack leaks VPN traffic using rogue DHCP servers (source)
- New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation (source)
- Google fixes fifth Chrome zero-day exploited in attacks this year (source)
- Apple backports fix for zero-day exploited in attacks to older iPhones (source)
- Microsoft fixes Windows zero-day exploited in QakBot malware attacks (source)
- Check Point VPN zero-day exploited since beginning of April (CVE-2024-24919) (source)
- Black Basta ransomware gang linked to Windows zero-day attacks (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-05-28 | CVE-2024-24919 | Unspecified vulnerability in Checkpoint products Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. | 8.6 |