{"id":6087,"date":"2024-05-31T10:05:02","date_gmt":"2024-05-31T16:05:02","guid":{"rendered":"https:\/\/beaconlab.mx\/?post_type=publicacion&#038;p=6087"},"modified":"2024-11-01T07:56:56","modified_gmt":"2024-11-01T12:56:56","slug":"2024-13-critical-vulnerability-in-check-point-vpn","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/","title":{"rendered":"Alert 2024-13 Critical Vulnerability in Check Point VPN"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><strong>Affected Product(s):<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Description:<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability, identified as <strong>CVE-2024-24919<\/strong>, has a severity score of <strong>8.6<\/strong>, as it allows attackers to exploit this vulnerability remotely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is important to note that a patch is already available that fully addresses this issue on the device; therefore, it is highly recommended that all users apply the patch as soon as possible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Additionally, the manufacturer has reported a significant increase in attacks on their products since <strong>Monday, May 27<\/strong>, shortly after discovering that these attacks were linked to the aforementioned vulnerability.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Impact:<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A malicious actor who can remotely access the aforementioned applications could exploit this flaw, gaining access to the device, which they could then use to extend their attack throughout the corporate network.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Solution:<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Apply the official patch published by Check Point.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Additional Information:<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/check-point-releases-emergency-fix-for-vpn-zero-day-exploited-in-attacks\/\">Bleeping Computer Article<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-24919\">NVD CVE-2024-24919<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/thehackernews.com\/2024\/05\/check-point-warns-of-zero-day-attacks.html\">The Hacker News Article<\/a><\/li>\n<\/ul>\n","protected":false},"featured_media":8870,"template":"","class_list":["post-6087","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alert 2024-13 Critical Vulnerability in Check Point VPN - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/logo-checkpoint.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/logo-checkpoint.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-05-31T16:05:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-11-01T12:56:56+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alert 2024-13 Critical Vulnerability in Check Point VPN - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/logo-checkpoint.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#listItem\",\"name\":\"Alert 2024-13 Critical Vulnerability in Check Point VPN\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#listItem\",\"position\":2,\"name\":\"Alert 2024-13 Critical Vulnerability in Check Point VPN\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/\",\"name\":\"Alert 2024-13 Critical Vulnerability in Check Point VPN - Beacon Lab\",\"description\":\"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/logo-checkpoint.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#mainImage\",\"width\":600,\"height\":300},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-13-critical-vulnerability-in-check-point-vpn\\\/#mainImage\"},\"datePublished\":\"2024-05-31T10:05:02-06:00\",\"dateModified\":\"2024-11-01T07:56:56-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alert 2024-13 Critical Vulnerability in Check Point VPN - Beacon Lab","description":"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#listItem","name":"Alert 2024-13 Critical Vulnerability in Check Point VPN"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#listItem","position":2,"name":"Alert 2024-13 Critical Vulnerability in Check Point VPN","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/","name":"Alert 2024-13 Critical Vulnerability in Check Point VPN - Beacon Lab","description":"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/logo-checkpoint.png","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#mainImage","width":600,"height":300},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/#mainImage"},"datePublished":"2024-05-31T10:05:02-06:00","dateModified":"2024-11-01T07:56:56-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alert 2024-13 Critical Vulnerability in Check Point VPN - Beacon Lab","og:description":"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as","og:url":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/logo-checkpoint.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/logo-checkpoint.png","og:image:width":600,"og:image:height":300,"article:published_time":"2024-05-31T16:05:02+00:00","article:modified_time":"2024-11-01T12:56:56+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alert 2024-13 Critical Vulnerability in Check Point VPN - Beacon Lab","twitter:description":"Affected Product(s): Check Point Security Gateways with remote access VPN or Mobile Access Software Blades enabled. Description: Check Point has recently released a security patch for a zero-day vulnerability in the VPN module that has been exploited by attackers to gain remote access to firewalls and attempt to compromise internal networks. This vulnerability, identified as","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/logo-checkpoint.png"},"aioseo_meta_data":{"post_id":"6087","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2024-10-17 23:40:52","updated":"2025-09-24 06:09:22","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2024-13 Critical Vulnerability in Check Point VPN\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2024-13 Critical Vulnerability in Check Point VPN","link":"https:\/\/beaconlab.us\/en\/publication\/2024-13-critical-vulnerability-in-check-point-vpn\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6087\/revisions"}],"predecessor-version":[{"id":7554,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6087\/revisions\/7554"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media\/8870"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=6087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}