checkpoint Vulnerabilities and Affected Products
Vulnerabilities associated with Check Point SmartConsole.
Products
Clear product- Quantum Security Gateway8 vulnerabilities
- Quantum Security Management4 vulnerabilities
- Check Point Mobile Access3 vulnerabilities
- Check Point SmartConsole2 vulnerabilities
- Identity Agent2 vulnerabilities
- Multi-Domain Security Management2 vulnerabilities
- Spark Firewalls2 vulnerabilities
- Check Point Harmony SASE1 vulnerability
- Check Point Management Log Server1 vulnerability
- Check Point Quantum Gateway, Spark Gateway and CloudGuard Network1 vulnerability
- cloudguard_network1 vulnerability
- clusterxl1 vulnerability
- ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management1 vulnerability
- gaia_portal1 vulnerability
- Harmony Endpoint Security Client for Windows1 vulnerability
- Harmony Endpoint.1 vulnerability
- harmony_endpoint1 vulnerability
- Hramony SASE1 vulnerability
- Identity Awareness1 vulnerability
- identity_agent1 vulnerability
- Multi-Domain Security Management Server1 vulnerability
- Multi-Domain Security Management, Quantum Security Management1 vulnerability
- multi-domain_management1 vulnerability
- quantum_appliances1 vulnerability
- quantum_maestro1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-24915MEDIUM | SmartConsole Sensitive Credential Exposure via Memory DumpCredentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them. | CVSS6.1v3.1 | EPSS0.175% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-24916MEDIUM | DLL-HiJackingUntrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin). CWE-427Jun 19, 2025 | CVSS6.5v3.1 | EPSS2.13% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |