# Checkpoint vulnerabilities

> Checkpoint has 128 published vulnerabilities across 73 products in our catalogue. 3 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Firewall-1, with 43. If you run Checkpoint software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/checkpoint

## At a glance

- **Published vulnerabilities:** 128
- **Known to be exploited:** 3
- **Products:** 73
- **Versions:** 376
- **Most recently added to the known-exploited list:** [CVE-2024-24919](https://www.precursorintelligence.com/what-is/cve-2024-24919), 30 May 2024. We keep watching the list.

## Which Checkpoint products have the most vulnerabilities?

- [Firewall-1](https://www.precursorintelligence.com/product/checkpoint/firewall-1): 43 published vulnerabilities, 13 versions
- [VPN-1](https://www.precursorintelligence.com/product/checkpoint/vpn-1): 14 published vulnerabilities, 14 versions
- [Endpoint Security](https://www.precursorintelligence.com/product/checkpoint/endpoint_security): 14 published vulnerabilities, 43 versions
- [Zonealarm](https://www.precursorintelligence.com/product/checkpoint/zonealarm): 14 published vulnerabilities, 46 versions
- [Security Gateway](https://www.precursorintelligence.com/product/checkpoint/security_gateway): 8 published vulnerabilities, 15 versions
- [Gaia OS](https://www.precursorintelligence.com/product/checkpoint/gaia_os): 7 published vulnerabilities, 17 versions
- [Remote Access Clients](https://www.precursorintelligence.com/product/checkpoint/remote_access_clients): 4 published vulnerabilities, 5 versions
- [Connectra Ngx](https://www.precursorintelligence.com/product/checkpoint/connectra_ngx): 4 published vulnerabilities, 4 versions
- [Zonealarm Extreme Security](https://www.precursorintelligence.com/product/checkpoint/zonealarm_extreme_security): 4 published vulnerabilities, 71 versions
- [Quantum Security Gateway](https://www.precursorintelligence.com/product/checkpoint/quantum_security_gateway): 4 published vulnerabilities, 0 versions

Each product page lists its own known-exploited flaws.

## Which Checkpoint vulnerabilities are being exploited?

3 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2024-24919](https://www.precursorintelligence.com/what-is/cve-2024-24919): Check Point Quantum Security Gateways Information Disclosure Vulnerability. High, CVSS 8.6, chance of use in 30 days >99%, known exploited since 30 May 2024.
- [CVE-2014-6271](https://www.precursorintelligence.com/what-is/cve-2014-6271): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022.
- [CVE-2014-7169](https://www.precursorintelligence.com/what-is/cve-2014-7169): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022.

## Which Checkpoint flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2014-6271](https://www.precursorintelligence.com/what-is/cve-2014-6271): >99%, Critical (CVSS 9.8), known exploited
- [CVE-2024-24919](https://www.precursorintelligence.com/what-is/cve-2024-24919): >99%, High (CVSS 8.6), known exploited
- [CVE-2014-7169](https://www.precursorintelligence.com/what-is/cve-2014-7169): >99%, Critical (CVSS 9.8), known exploited
- [CVE-2021-3449](https://www.precursorintelligence.com/what-is/cve-2021-3449): 64%, Medium (CVSS 5.9)
- [CVE-2002-1623](https://www.precursorintelligence.com/what-is/cve-2002-1623): 49%, Medium (CVSS 5.0)
- [CVE-2021-30358](https://www.precursorintelligence.com/what-is/cve-2021-30358): 27%, High (CVSS 7.2)
- [CVE-2021-30357](https://www.precursorintelligence.com/what-is/cve-2021-30357): 23%, Medium (CVSS 5.3)
- [CVE-2023-28130](https://www.precursorintelligence.com/what-is/cve-2023-28130): 21%, High (CVSS 7.2)
- [CVE-2019-8456](https://www.precursorintelligence.com/what-is/cve-2019-8456): 20%, Medium (CVSS 5.9)
- [CVE-2022-23745](https://www.precursorintelligence.com/what-is/cve-2022-23745): 17%, High (CVSS 7.5)

## All Checkpoint products we track

59 products with at least one tracked version, most vulnerabilities first:

- [Firewall-1](https://www.precursorintelligence.com/product/checkpoint/firewall-1): 43 vulnerabilities, 13 versions
- [VPN-1](https://www.precursorintelligence.com/product/checkpoint/vpn-1): 14 vulnerabilities, 14 versions
- [Endpoint Security](https://www.precursorintelligence.com/product/checkpoint/endpoint_security): 14 vulnerabilities, 43 versions
- [Zonealarm](https://www.precursorintelligence.com/product/checkpoint/zonealarm): 14 vulnerabilities, 46 versions
- [Security Gateway](https://www.precursorintelligence.com/product/checkpoint/security_gateway): 8 vulnerabilities, 15 versions
- [Gaia OS](https://www.precursorintelligence.com/product/checkpoint/gaia_os): 7 vulnerabilities, 17 versions
- [Remote Access Clients](https://www.precursorintelligence.com/product/checkpoint/remote_access_clients): 4 vulnerabilities, 5 versions
- [Connectra Ngx](https://www.precursorintelligence.com/product/checkpoint/connectra_ngx): 4 vulnerabilities, 4 versions
- [Zonealarm Extreme Security](https://www.precursorintelligence.com/product/checkpoint/zonealarm_extreme_security): 4 vulnerabilities, 71 versions
- [Provider-1](https://www.precursorintelligence.com/product/checkpoint/provider-1): 4 vulnerabilities, 1 version
- [Endpoint Security Clients](https://www.precursorintelligence.com/product/checkpoint/endpoint_security_clients): 3 vulnerabilities, 2 versions
- [Secureclient Ng](https://www.precursorintelligence.com/product/checkpoint/secureclient_ng): 2 vulnerabilities, 2 versions
- [Identity Agent](https://www.precursorintelligence.com/product/checkpoint/identity_agent): 2 vulnerabilities, 2 versions
- [Quantum Security Gateway Firmware](https://www.precursorintelligence.com/product/checkpoint/quantum_security_gateway_firmware): 2 vulnerabilities, 5 versions
- [Capsule Docs Standalone Client](https://www.precursorintelligence.com/product/checkpoint/capsule_docs_standalone_client): 2 vulnerabilities, 1 version
- [Gaia Portal](https://www.precursorintelligence.com/product/checkpoint/gaia_portal): 2 vulnerabilities, 5 versions
- [Smartconsole](https://www.precursorintelligence.com/product/checkpoint/smartconsole): 2 vulnerabilities, 9 versions
- [SSL Network Extender](https://www.precursorintelligence.com/product/checkpoint/ssl_network_extender): 2 vulnerabilities, 8 versions
- [VPN-1 Firewall-1](https://www.precursorintelligence.com/product/checkpoint/vpn-1_firewall-1): 2 vulnerabilities, 3 versions
- [VPN-1 Secureclient](https://www.precursorintelligence.com/product/checkpoint/vpn-1_secureclient): 2 vulnerabilities, 4 versions
- [Quantum Security Management Firmware](https://www.precursorintelligence.com/product/checkpoint/quantum_security_management_firmware): 1 vulnerability, 2 versions
- [Quantum Spark Firmware](https://www.precursorintelligence.com/product/checkpoint/quantum_spark_firmware): 1 vulnerability, 4 versions
- [Sandblast Agent for Browsers](https://www.precursorintelligence.com/product/checkpoint/sandblast_agent_for_browsers): 1 vulnerability, 1 version
- [Smartconsole for Endpoint Security Server](https://www.precursorintelligence.com/product/checkpoint/smartconsole_for_endpoint_security_server): 1 vulnerability, 1 version
- [VPN-1 Firewall-1 Next Generation](https://www.precursorintelligence.com/product/checkpoint/vpn-1_firewall-1_next_generation): 1 vulnerability, 8 versions
- [VPN-1 Firewall-1 Vsx](https://www.precursorintelligence.com/product/checkpoint/vpn-1_firewall-1_vsx): 1 vulnerability, 2 versions
- [VPN-1 Power UTM](https://www.precursorintelligence.com/product/checkpoint/vpn-1_power_utm): 1 vulnerability, 1 version
- [VPN-1 Power UTM with Ngx](https://www.precursorintelligence.com/product/checkpoint/vpn-1_power_utm_with_ngx): 1 vulnerability, 1 version
- [Zonealarm Security Suite](https://www.precursorintelligence.com/product/checkpoint/zonealarm_security_suite): 1 vulnerability, 2 versions
- [Capsule Workspace](https://www.precursorintelligence.com/product/checkpoint/capsule_workspace): 1 vulnerability, 2 versions
- [Check Point Integrity Client](https://www.precursorintelligence.com/product/checkpoint/check_point_integrity_client): 1 vulnerability, 2 versions
- [Check Point VPN](https://www.precursorintelligence.com/product/checkpoint/check_point_vpn): 1 vulnerability, 5 versions
- [Check Point VPN-1 Pro](https://www.precursorintelligence.com/product/checkpoint/check_point_vpn-1_pro): 1 vulnerability, 2 versions
- [Cloudguard Network Security](https://www.precursorintelligence.com/product/checkpoint/cloudguard_network_security): 1 vulnerability, 5 versions
- [Endpoint Connect](https://www.precursorintelligence.com/product/checkpoint/endpoint_connect): 1 vulnerability, 1 version
- [Endpoint Security Mi Server R73](https://www.precursorintelligence.com/product/checkpoint/endpoint_security_mi_server_r73): 1 vulnerability, 1 version
- [Endpoint Security Server Package](https://www.precursorintelligence.com/product/checkpoint/endpoint_security_server_package): 1 vulnerability, 1 version
- [Endpoint Security VPN](https://www.precursorintelligence.com/product/checkpoint/endpoint_security_vpn): 1 vulnerability, 1 version
- [Express](https://www.precursorintelligence.com/product/checkpoint/express): 1 vulnerability, 1 version
- [Gaia](https://www.precursorintelligence.com/product/checkpoint/gaia): 1 vulnerability, 1 version
- [Harmony Browse](https://www.precursorintelligence.com/product/checkpoint/harmony_browse): 1 vulnerability, 1 version
- [Harmony Endpoint](https://www.precursorintelligence.com/product/checkpoint/harmony_endpoint): 1 vulnerability, 8 versions
- [Ica Management Portal](https://www.precursorintelligence.com/product/checkpoint/ica_management_portal): 1 vulnerability, 4 versions
- [Ipsec VPN](https://www.precursorintelligence.com/product/checkpoint/ipsec_vpn): 1 vulnerability, 2 versions
- [Ipso OS](https://www.precursorintelligence.com/product/checkpoint/ipso_os): 1 vulnerability, 1 version
- [Log Server](https://www.precursorintelligence.com/product/checkpoint/log_server): 1 vulnerability, 3 versions
- [Management Server](https://www.precursorintelligence.com/product/checkpoint/management_server): 1 vulnerability, 1 version
- [Mobile Access Portal Agent](https://www.precursorintelligence.com/product/checkpoint/mobile_access_portal_agent): 1 vulnerability, 5 versions
- [Multi-Domain Management Firmware](https://www.precursorintelligence.com/product/checkpoint/multi-domain_management_firmware): 1 vulnerability, 2 versions
- Multi-Domain Management/provider-1: 1 vulnerability, 5 versions
- [Ng-AI](https://www.precursorintelligence.com/product/checkpoint/ng-ai): 1 vulnerability, 2 versions
- [Web Intelligence](https://www.precursorintelligence.com/product/checkpoint/web_intelligence): 1 vulnerability, 1 version
- [Zonealarm Anti-Ransomware](https://www.precursorintelligence.com/product/checkpoint/zonealarm_anti-ransomware): 1 vulnerability, 9 versions
- [Zonealarm Pro](https://www.precursorintelligence.com/product/checkpoint/zonealarm_pro): 1 vulnerability, 1 version
- [Capsule Docs](https://www.precursorintelligence.com/product/checkpoint/capsule_docs): 1 vulnerability, 1 version
- [VPN-1 UTM Edge](https://www.precursorintelligence.com/product/checkpoint/vpn-1_utm_edge): 1 vulnerability, 1 version
- [VPN-1 UTM Edge W Embedded Ngx](https://www.precursorintelligence.com/product/checkpoint/vpn-1_utm_edge_w_embedded_ngx): 1 vulnerability, 1 version
- [VPN-1 Firewall 1](https://www.precursorintelligence.com/product/checkpoint/vpn-1_firewall_1): 0 vulnerabilities, 1 version
- [Zonealarm Extreme Security Nextgen](https://www.precursorintelligence.com/product/checkpoint/zonealarm_extreme_security_nextgen): 0 vulnerabilities, 13 versions

## Questions

### How many vulnerabilities does Checkpoint have?

Our catalogue lists 128 published vulnerabilities across 73 products and 376 versions from Checkpoint. The most recent Checkpoint flaw added to the known-exploited list is CVE-2024-24919, on 30 May 2024.

### Which Checkpoint vulnerabilities are being exploited?

3 Checkpoint vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2024-24919, CVE-2014-6271 and CVE-2014-7169. The full list is on this page.

### Which Checkpoint product has the most vulnerabilities?

Firewall-1, with 43 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Checkpoint vulnerabilities?

Create a Precursor Intelligence account and track the Checkpoint products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Checkpoint?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact