IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
6.1Mittel

CVE-2024-24915SmartConsole Sensitive Credential Exposure via Memory Dump

checkpoint Check Point SmartConsole Veröffentlicht: (vor 1 Jahr)

Beschreibung

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

Schwachstellentyp (CWE): CWE-316CWE-312

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
checkpoint Check Point SmartConsole Check Point SmartConsole versions R81.10, R81.20, R82
checkpoint smartconsole r81.10

Referenzen und Patches

CPE-Treffer (NVD) (38)
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build400:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build402:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build404:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build406:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build407:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build409:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build410:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build412:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build413:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build414:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build416:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build417:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build418:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build420:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build423:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build424:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build425:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build426:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build427:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build428:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build429:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build640:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build641:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build645:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build646:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build649:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build651:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build653:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build654:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build655:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build656:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build658:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build659:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build660:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build661:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build663:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r82:build1051:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r82:build1053:*:*:*:*:*:*

Neue CVEs im selben Produkt — Check Point

9.8Kritisch
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS
9.3Kritisch
CVE-2026-18574

Authentication Bypass in Check Point Security Management Server

checkpoint Security Management Server; checkpoint Multi-Domain Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the S…

7.5Hoch
CVE-2026-62145

Local Privilege Escalation in Gaia Portal

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.