Security Research

CVE-2024-24919 Check Point VPN Arbitrary File Read: The Admin Plane on the Public Internet

Thinking 2024-05-15 4 min read Research Dossier
#Vulnerability Analysis#Code Audit#Network Attack
Dark dossier of VPN gateway and the leaked plaintext credentials

Check Point’s SSL Network Extender exposes /clients/MyCRL on the public internet without authentication — a single POST reads /etc/passwd. Combined with Censys and nuclei templates, this “admin plane trusts by default” gap is being harvested at scale.

Unlock to view this content.