CVE-2024-24915

Estado: AnalizadaAlta (7.2)—

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 7.2

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.21%
Percentil entre todas las CVEs puntuadas: 10
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1210 Exploitation of Remote Serviceslateral movement85 %
Impacto principalT1552.001 Credentials In Filescredential access90 %
Impacto secundarioT1098 Account Manipulationpersistence · privilege escalation75 %

AV:N/PR:H/UI:N indica acceso remoto que requiere privilegios administrativos. CWE-316/312 (credenciales en memoria sin limpiar) permite extraer credenciales de volcados de memoria. El atacante con permisos Admin accede a credenciales en claro (T1552.001) y puede reutilizarlas (T1098).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict File and Directory Permissions Privileged Account Management Network Segmentation Disable or Remove Feature or Program Vulnerability Scanning User Training

Tecnologías afectadas (1)

Checkpoint — Smartconsole

CWE

CWE-316
CWE-312

Referencias

https://support.checkpoint.com/results/sk/sk183545

JSON original (NVD)

Mostrar

{
  "id": "CVE-2024-24915",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-24915",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-30T13:14:08.984786Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@checkpoint.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@checkpoint.com",
      "affectedData": [
        {
          "vendor": "checkpoint",
          "product": "Check Point SmartConsole",
          "versions": [
            {
              "status": "affected",
              "version": "Check Point SmartConsole versions R81.10, R81.20, R82"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-06-29T12:15:22.803",
  "references": [
    {
      "url": "https://support.checkpoint.com/results/sk/sk183545",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@checkpoint.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@checkpoint.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-316"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-312"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them."
    },
    {
      "lang": "es",
      "value": "Las credenciales no se borran de la memoria después de usarlas. Un usuario con permisos de administrador puede ejecutar un volcado de memoria para el proceso de SmartConsole y recuperarlas."
    }
  ],
  "lastModified": "2026-06-17T07:15:13.177",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build400:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A8D932A-F264-4407-9634-440D4E33FC52"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build402:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FD3EF2A-CB25-4ED1-96AB-1D0D6B9EED08"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build404:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BF908EF-B678-4360-AA22-FF3A21ADBBD0"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build406:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEEF7946-C5C5-4E73-ABC7-27EF17406A6C"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build407:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "911A64FD-04DA-4302-A18A-628FD0576A04"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build409:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB2CF53D-8CA7-484D-830F-85F0403D1F58"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build410:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2334CCE9-1421-41C4-B836-F56E0E461509"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build412:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE76D114-0FB6-4AA1-9DAC-22C365BBC2B5"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build413:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAC74BAA-CBE9-4E6A-8BC3-EE2BDCC74BF3"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build414:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF85F114-6640-4F42-A15C-ADD2F62DB111"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build416:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "943F6057-DE9A-427A-A7E9-DA01C2CE3E51"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build417:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DE48E6D-890D-450F-9B5A-C4D85F435D74"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build418:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4A9E7A3-C2D4-423E-9868-FC24348B03FF"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build420:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFDD876B-FEDE-40C5-BDC3-42F4625CA8CB"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build423:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21D64A56-7351-4C4C-BAE7-3681979B0617"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build424:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A857B4D-5C07-4943-A378-7F2F24CF25CC"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build425:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "604AA11E-76A8-49C7-8E48-9AB327DC2FCD"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build426:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D66ACBB5-0AF3-4FE9-88E5-087BD1FFAFED"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build427:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20707AA5-C7B7-49AA-AA22-916A7F3D080C"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build428:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D43D7AA-17A9-4FD6-950D-88F5927EB81F"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build429:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C82E304-0595-4074-AF5C-E15B36C98E77"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build640:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C44125A4-590E-4900-B9AC-792D09FF202C"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build641:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "633F00F4-B992-44C0-8865-F5F104F424A2"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build645:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACB9BBA7-F7D9-468A-8AF4-70926DB58A73"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build646:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36FCAD19-496B-44F9-98A2-F47CF8BECFC0"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build649:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B8FB412-D9FF-46FD-81C7-8185FAE8C4C5"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build651:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51B50559-BBFF-4FA1-AC37-A08F12DD6BDB"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build653:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0118CAB6-6FB8-4EA2-A381-5BC9AB897A02"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build654:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CE0C48D-EE95-4762-ABA1-7D2F1DFFFC90"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build655:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B017667C-1FCC-4C2A-A8F1-151E86C8549A"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build656:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B0FB3C3-3401-4B1B-AA90-7CE95D2D3528"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build658:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16466AAA-ACEE-4ABC-83A3-19AB78D2DC66"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build659:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69696E27-2511-4139-9B8E-8D6DE794B320"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build660:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "012045D4-CE27-42BD-90B6-EF1C9F140E20"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build661:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2979AD7A-2A1B-4E83-9619-F5234C5F16A4"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build663:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1FE8774-D5CA-438D-AE77-F37FBEDFABF3"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r82:build1051:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18C43F28-77F7-4C3B-80E3-22922B7D91FF"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r82:build1053:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABCA63CE-3495-4137-ADF0-0A241157F613"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@checkpoint.com"
}