Preventative Hotfix for CVE-2024-24919 - Quantum Spark Gateways

[Amir_Ayalon]

Hi All

Please review the following SK for latest firmware's containing a Fix for CVE-2024-24919 and other important measures it is recommended to implement on the GW.

https://support.checkpoint.com/results/sk/sk182357

Thanks

Amir Ayalon

[lgarridor]

If the client does not want or is currently unable to switch to two-factor authentication, would this hotfix affect users by preventing them from accessing the VPN using only their password?

[_Val_]

No, the posted hotfix is closing the vulnerability, not preventing users from connecting with password-only authentication.

However, it is strongly advisable to reset passwords for such users and to follow all the security measures mentioned in https://support.checkpoint.com/results/sk/sk182357 and not just apply the fix.