CyberzSOC

This high-severity information disclosure vulnerability can be exploited to gain unauthorised access to sensitive information on systems with remote Access VPN or Mobile Access Software Blades enabled [1]. It is recommended applying the hotfix and the extra protection measures provided by the vendor Tracked as CVE-2024-24919, the high-severity information disclosure vulnerability enables attackers to read certain information on internet-exposed Check Point Security Gateways with remote Access VPN or Mobile Access Software Blades enabled [1]. Check Point has released the following security updates to address the flaw [1]: CERT-EU recommends applying the hotfix and the extra protection measures on affected devices As described in Check Point’s advisory, it is strongly recommended [2]: Upon taking these actions, it is also recommended reviewing the authentication logs for those local accounts to identify any suspicious connection.