topic Re: Vulnerability CVE-2024-7264 in Firewall and Security Management

Vulnerability CVE-2024-7264

tavi0906 — Wed, 29 Oct 2025 03:20:02 GMT

There are VA detected on checkpoint smart console as following. Kindly advise how to fix.

as a trail solution i have installed the latest build for smartconsole and the issue is still same

Medium

205024

CVE-2024-7264

libcurl 7.32.0 < 8.9.1 DoS (CVE-2024-7264)

Upgrade Curl to version 8.9.1 or later

Path : C:\Program Files (x86)\CheckPoint\SmartConsole\R81.20\81.20.9700.656\libcurl.dll
Installed version : 7.61.1.0
Fixed version : 8.9.1

Re: Vulnerability CVE-2024-7264

the_rock — Wed, 29 Oct 2025 03:29:26 GMT

Check Point firewalls are not vulnerable to CVE-2024-7264 because the vulnerability affects the libcurl library and Check Point products do not use this library.

Re: Vulnerability CVE-2024-7264

tavi0906 — Fri, 31 Oct 2025 02:17:44 GMT

is this not correct ?

Re: Vulnerability CVE-2024-7264

tavi0906 — Fri, 31 Oct 2025 02:15:41 GMT

In Check Point environments, the main reference to libcurl is through the command-line utility curl_cli. ?

is this not correct ?

Re: Vulnerability CVE-2024-7264

tavi0906 — Fri, 31 Oct 2025 02:19:29 GMT

Re: Vulnerability CVE-2024-7264

the_rock — Fri, 31 Oct 2025 02:22:31 GMT

Thats just smart console folder.

Re: Vulnerability CVE-2024-7264

the_rock — Fri, 31 Oct 2025 02:22:46 GMT

I think so, yes.

Re: Vulnerability CVE-2024-7264

tavi0906 — Fri, 31 Oct 2025 02:29:49 GMT

Okay. Can we say that Check Point is not vulnerable to this CVE, or has Check Point not yet released any official information regarding it?

Re: Vulnerability CVE-2024-7264

the_rock — Fri, 31 Oct 2025 02:31:42 GMT

I even had TAC case about it before and they told me exact same thing, which is that CP firewalls are not vulnerable to mentioned CVE.

Re: Vulnerability CVE-2024-7264

tavi0906 — Fri, 31 Oct 2025 02:37:35 GMT

Oh, would you be able to share a screenshot, please?

Re: Vulnerability CVE-2024-7264

the_rock — Fri, 31 Oct 2025 02:39:00 GMT

This was few months ago, will see if I can find an email about it.

Re: Vulnerability CVE-2024-7264

Ruan_Kotze — Fri, 31 Oct 2025 08:18:19 GMT

Hey Andy,

You might have missed it but OP was not reporting a libcurl vulnerability on the gateway side, it's reported as being in SmartConsole.

-Ruan

Re: Vulnerability CVE-2024-7264

Chris_Atkinson — Fri, 31 Oct 2025 10:01:39 GMT

Whilst I dislike any detection based solely on version I have asked internally about this.

Suggest raising a specific TAC case and looping in your SE aswell.

Re: Vulnerability CVE-2024-7264

the_rock — Fri, 31 Oct 2025 10:09:29 GMT

I saw that, yes. Anyway, let Chris confirm internally, to be 100% sure.

Re: Vulnerability CVE-2024-7264

Chris_Atkinson — Sat, 01 Nov 2025 14:12:49 GMT

This was investigated at the time and the vulnerable flow is not in use in our implementation.

Where required requests to upgrade the libcurl version can be made via your SE under the RFE process.

Re: Vulnerability CVE-2024-7264

the_rock — Sat, 01 Nov 2025 16:38:49 GMT

Thats more less what TAC advised as well.