IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.1Media

CVE-2024-24915SmartConsole Sensitive Credential Exposure via Memory Dump

checkpoint Check Point SmartConsole Publicada: (hace 1 año)

Descripción

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

Debilidad (CWE): CWE-316CWE-312

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
checkpoint Check Point SmartConsole Check Point SmartConsole versions R81.10, R81.20, R82
checkpoint smartconsole r81.10

Referencias y parches

Coincidencias CPE (NVD) (38)
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build400:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build402:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build404:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build406:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build407:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build409:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build410:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build412:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build413:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build414:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build416:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build417:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build418:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build420:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build423:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build424:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build425:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build426:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build427:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build428:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.10:build429:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build640:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build641:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build645:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build646:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build649:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build651:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build653:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build654:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build655:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build656:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build658:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build659:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build660:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build661:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r81.20:build663:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r82:build1051:*:*:*:*:*:*
  • cpe:2.3:a:checkpoint:smartconsole:r82:build1053:*:*:*:*:*:*

CVE recientes del mismo producto — Check Point

9.8Crítica
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS
9.3Crítica
CVE-2026-18574

Authentication Bypass in Check Point Security Management Server

checkpoint Security Management Server; checkpoint Multi-Domain Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the S…

7.5Alta
CVE-2026-62145

Local Privilege Escalation in Gaia Portal

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.