topic Re: Preventative Hotfix for CVE-2024-24919 - Quantum Spark Gateways in Spark Firewall (SMB)

Preventative Hotfix for CVE-2024-24919 - Quantum Spark Gateways

Amir_Ayalon — Sun, 02 Jun 2024 08:28:43 GMT

Hi All

Please review the following SK for latest firmware's containing a Fix for CVE-2024-24919 and other important measures it is recommended to implement on the GW.

https://support.checkpoint.com/results/sk/sk182357

Thanks

Amir Ayalon

Re: Preventative Hotfix for CVE-2024-24919 - Quantum Spark Gateways

lgarridor — Thu, 06 Jun 2024 21:59:09 GMT

If the client does not want or is currently unable to switch to two-factor authentication, would this hotfix affect users by preventing them from accessing the VPN using only their password?

Re: Preventative Hotfix for CVE-2024-24919 - Quantum Spark Gateways

_Val_ — Fri, 07 Jun 2024 10:56:04 GMT

No, the posted hotfix is closing the vulnerability, not preventing users from connecting with password-only authentication.

However, it is strongly advisable to reset passwords for such users and to follow all the security measures mentioned in https://support.checkpoint.com/results/sk/sk182357 and not just apply the fix.