Checkpoint vulnerabilities3 known to be exploited.
Checkpoint has 128 published vulnerabilities across 73 products in our catalogue. 3 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Firewall-1, with 43. If you run Checkpoint software, patch the exploited flaws first.
The most recent Checkpoint flaw added to the known-exploited list is CVE-2024-24919, on 30 May 2024. We keep watching the known-exploited list.
Which Checkpoint products have the most vulnerabilities?
Firewall-1 leads with 43 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Checkpoint vulnerabilities are being exploited?
3 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.6Check Point Quantum Security Gateways Information Disclosure Vulnerability
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
Which Checkpoint flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by...
- >99%
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades.
- >99%
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown...
- 64%CVE-2021-3449Medium
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.
- 49%CVE-2002-1623Medium
The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote...
- 27%CVE-2021-30358High
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
- 23%CVE-2021-30357Medium
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.
- 21%CVE-2023-28130High
Local user may lead to privilege escalation using Gaia Portal hostnames page.
- 20%CVE-2019-8456Medium
Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server.
- 17%CVE-2022-23745High
A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS).
All Checkpoint products we track.
59 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Firewall-1firewall-143 vulnerabilities13 versions
- Endpoint Securityendpoint_security14 vulnerabilities43 versions
- VPN-1vpn-114 vulnerabilities14 versions
- Zonealarmzonealarm14 vulnerabilities46 versions
- Security Gatewaysecurity_gateway8 vulnerabilities15 versions
- Gaia OSgaia_os7 vulnerabilities17 versions
- Connectra Ngxconnectra_ngx4 vulnerabilities4 versions
- Provider-1provider-14 vulnerabilities1 version
- Remote Access Clientsremote_access_clients4 vulnerabilities5 versions
- Zonealarm Extreme Securityzonealarm_extreme_security4 vulnerabilities71 versions
- Endpoint Security Clientsendpoint_security_clients3 vulnerabilities2 versions
- Capsule Docs Standalone Clientcapsule_docs_standalone_client2 vulnerabilities1 version
- Gaia Portalgaia_portal2 vulnerabilities5 versions
- Identity Agentidentity_agent2 vulnerabilities2 versions
- Quantum Security Gateway Firmwarequantum_security_gateway_firmware2 vulnerabilities5 versions
- Secureclient Ngsecureclient_ng2 vulnerabilities2 versions
- Smartconsolesmartconsole2 vulnerabilities9 versions
- SSL Network Extenderssl_network_extender2 vulnerabilities8 versions
- VPN-1 Firewall-1vpn-1_firewall-12 vulnerabilities3 versions
- VPN-1 Secureclientvpn-1_secureclient2 vulnerabilities4 versions
- Capsule Docscapsule_docs1 vulnerability1 version
- Capsule Workspacecapsule_workspace1 vulnerability2 versions
- Check Point Integrity Clientcheck_point_integrity_client1 vulnerability2 versions
- Check Point VPNcheck_point_vpn1 vulnerability5 versions
This directory lists the 59 Checkpoint products with at least one tracked version, of 73 in our catalogue.
Running Checkpoint? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
- Matched to
- Security Gateway on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 128 published vulnerabilities across 73 products and 376 versions from Checkpoint. The most recent Checkpoint flaw added to the known-exploited list is CVE-2024-24919, on 30 May 2024.
3 Checkpoint vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2024-24919, CVE-2014-6271 and CVE-2014-7169. The full list is on this page.
Firewall-1, with 43 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Checkpoint products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.