What’s Vulnerable › Vulnerabilities
CVE-2024-24915: SmartConsole Sensitive Credential Exposure via Memory Dump
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-29 · updated 2026-06-17
- Weakness: CWE-316
Description
Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
Affected products
- checkpoint Check Point SmartConsole: r81.10-build400, r81.10-build402, r81.10-build404, r81.10-build406, r81.10-build407, r81.10-build409 (+32)
References
Get alerted when CVE-2024-24915 or the next vulnerability affects your stack