CVE-2024-24914: High severity Checkpoint Gaia Os vulnerability
Published Nov 7, 2024
·Updated
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
Affected Software
11 affected components
All of the following
Any of the following
Checkpoint Gaia Os=r81
Checkpoint Gaia Os=r81.10
Checkpoint Gaia Os=r81.20
Any of the following
Checkpoint Clusterxl
Checkpoint Multi-domain Management
Checkpoint Quantum 6700
Checkpoint Quantum Maestro
Checkpoint Quantum Scalable Chassis
Checkpoint Quantum Security Gateway
Checkpoint Quantum Security Management
Checkpoint Quantum Spark
Event History
Nov 7, 2024
CVE Published
via MITRE·11:25 AM
Data Sourced
via MITRE·11:25 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24914?
CVE-2024-24914 is considered a critical vulnerability due to its potential for code injection by authenticated users.
2
How do I fix CVE-2024-24914?
To fix CVE-2024-24914, apply the latest security updates provided by Checkpoint for the affected Gaia OS versions.
3
Which versions of Checkpoint Gaia OS are affected by CVE-2024-24914?
CVE-2024-24914 affects Checkpoint Gaia OS versions r81, r81.10, and r81.20.
4
What type of vulnerability is CVE-2024-24914?
CVE-2024-24914 is a code injection vulnerability that allows authenticated users to execute commands via HTTP requests.
5
Who can exploit CVE-2024-24914?
Only authenticated Gaia users can exploit CVE-2024-24914 to inject code or commands.