CVE-2024-24916

DLL-HiJacking

State: Published
Severity: 6.5 Medium
Published: Jun 19, 2025
Updated: Jun 20, 2025
Reserved: Feb 1, 2024

Description

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H	checkpoint

Weaknesses

CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Affected Products

Product	Versions
Check Point SmartConsolecheckpoint	Check Point SmartConsole versions R81.10, R81.20Affected

References

https://support.checkpoint.com/results/sk/sk183342

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.