CVE-2024-24911

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.checkpoint.com/results/sk/sk183101	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:checkpoint:gaia_os:r81:::::::*
	cpe:2.3:o:checkpoint:gaia_os:r81.10:::::::*
	cpe:2.3:o:checkpoint:gaia_os:r81.20:::::::*
	cpe:2.3:o:checkpoint:gaia_os:r82:::::::*

OR	cpe:2.3:h:checkpoint:multi-domain_management:-:::::::*
	cpe:2.3:h:checkpoint:quantum_security_management:-:::::::*

History

No history.

Information

Published : 2025-02-06 14:15

Updated : 2025-10-15 16:33

NVD link : CVE-2024-24911

Mitre link : CVE-2024-24911

CVE.ORG link : CVE-2024-24911

JSON object : View

Products Affected

checkpoint

gaia_os
multi-domain_management
quantum_security_management

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2024-24911", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-02-06T14:15:29.577", "references": [{"url": "https://support.checkpoint.com/results/sk/sk183101", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache."}, {"lang": "es", "value": "En casos excepcionales, el proceso cpca en el servidor de administraci\u00f3n de seguridad o servidor de administraci\u00f3n de dominio puede cerrarse inesperadamente y crear un archivo de volcado de memoria. Cuando el proceso cpca deja de funcionar, pueden surgir problemas de conectividad de VPN y SIC si la CRL no est\u00e1 presente en la cach\u00e9 de CRL de Security Gateway."}], "lastModified": "2025-10-15T16:33:11.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:checkpoint:gaia_os:r81:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C580EA73-A731-497E-885E-F00854E07EA9"}, {"criteria": "cpe:2.3:o:checkpoint:gaia_os:r81.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55864700-51C8-4540-B4B2-05CE4C7FC245"}, {"criteria": "cpe:2.3:o:checkpoint:gaia_os:r81.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BE80E1E-02E1-44E3-B309-3079F0F5A89C"}, {"criteria": "cpe:2.3:o:checkpoint:gaia_os:r82:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6443AE50-1CB5-4D00-8C8D-97DB966687DD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:checkpoint:multi-domain_management:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1584E1B4-412C-40E2-BF07-4E464692F2AE"}, {"criteria": "cpe:2.3:h:checkpoint:quantum_security_management:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08601413-25E2-4977-B67A-C11A9D788EA8"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}