CVE-2024-24911

Out of Bounds read in the CPCA process on Check Point Management Server

State
Published
Severity
5.3 Medium
Published
Feb 6, 2025
Updated
Feb 6, 2025
Reserved
Feb 1, 2024

Read the record on cve.org

Description

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lcheckpoint

Weaknesses

Affected Products

ProductVersions
Multi-Domain Security Management, Quantum Security Managementcheckpoint
  • Quantum Security Management R81 (EOS), R81.10, R81.20Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.