CVE-2024-24911
highpriority · track · 30EPSS 0.004 · 34 %ileEUUSEPSS · scored 2026-10-27
In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.3–7.5
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (5)
Products and version ranges known to be affected.
- checkpoint Multi-Domain Security Management, Quantum Security Management≤ Quantum Security Management R81 (EOS), R81.10, R81.20enisa_euvdEU
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- https://support.checkpoint.com/results/sk/sk183101cnnvd
- https://vigilance.fr/vulnerability/Check-Point-Quantum-Security-Management-out-of-bounds-memory-reading-via-CPCA-Process-46308cnnvd
- https://support.checkpoint.com/results/sk/sk183101enisa_euvd
- https://support.checkpoint.com/results/sk/sk183101Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan