CVE-2024-24916

Estado: AnalizadaAlta (7.8)—

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Puntuación base: 7.8

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 2.74%
Percentil entre todas las CVEs puntuadas: 86
Fecha de la puntuación: 5/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1203 Exploitation for Client Executionexecution85 %
Impacto principalT1574.007 Path Interception by PATH Environment Variablestealth · execution80 %
Impacto secundarioT1059 Command and Scripting Interpreterexecution75 %

AV:L + UI:R indica ejecución en cliente (abrir installer preparado). DLL hijacking (CWE-427) permite cargar librerías no confiables con privs de admin, logrando ejecución de código arbitrario.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Execution Prevention Audit Restrict Web-Based Content Restrict File and Directory Permissions Privileged Account Management Limit Software Installation

Tecnologías afectadas (1)

Checkpoint — Smartconsole

CWE

CWE-427
CWE-427

Referencias

https://support.checkpoint.com/results/sk/sk183342

JSON original (NVD)

Mostrar

{
  "id": "CVE-2024-24916",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-24916",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-20T13:06:34.598794Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@checkpoint.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.6
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@checkpoint.com",
      "affectedData": [
        {
          "vendor": "checkpoint",
          "product": "Check Point SmartConsole",
          "versions": [
            {
              "status": "affected",
              "version": "Check Point SmartConsole versions R81.10, R81.20"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-06-19T14:15:44.983",
  "references": [
    {
      "url": "https://support.checkpoint.com/results/sk/sk183342",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@checkpoint.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@checkpoint.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin)."
    },
    {
      "lang": "es",
      "value": "Es posible que se carguen y ejecuten DLL no confiables en el directorio del instalador, lo que puede provocar la ejecución de código arbitrario con los privilegios del instalador (administrador)."
    }
  ],
  "lastModified": "2026-06-17T07:15:13.310",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build400:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A8D932A-F264-4407-9634-440D4E33FC52"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build402:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FD3EF2A-CB25-4ED1-96AB-1D0D6B9EED08"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build404:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BF908EF-B678-4360-AA22-FF3A21ADBBD0"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build406:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEEF7946-C5C5-4E73-ABC7-27EF17406A6C"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build407:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "911A64FD-04DA-4302-A18A-628FD0576A04"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build409:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB2CF53D-8CA7-484D-830F-85F0403D1F58"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build410:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2334CCE9-1421-41C4-B836-F56E0E461509"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build412:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE76D114-0FB6-4AA1-9DAC-22C365BBC2B5"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build413:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAC74BAA-CBE9-4E6A-8BC3-EE2BDCC74BF3"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build414:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF85F114-6640-4F42-A15C-ADD2F62DB111"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build416:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "943F6057-DE9A-427A-A7E9-DA01C2CE3E51"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build417:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DE48E6D-890D-450F-9B5A-C4D85F435D74"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build418:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4A9E7A3-C2D4-423E-9868-FC24348B03FF"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build420:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFDD876B-FEDE-40C5-BDC3-42F4625CA8CB"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build423:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21D64A56-7351-4C4C-BAE7-3681979B0617"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build424:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A857B4D-5C07-4943-A378-7F2F24CF25CC"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.10:build425:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "604AA11E-76A8-49C7-8E48-9AB327DC2FCD"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build640:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C44125A4-590E-4900-B9AC-792D09FF202C"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build641:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "633F00F4-B992-44C0-8865-F5F104F424A2"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build645:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACB9BBA7-F7D9-468A-8AF4-70926DB58A73"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build646:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36FCAD19-496B-44F9-98A2-F47CF8BECFC0"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build649:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B8FB412-D9FF-46FD-81C7-8185FAE8C4C5"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build651:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51B50559-BBFF-4FA1-AC37-A08F12DD6BDB"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build653:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0118CAB6-6FB8-4EA2-A381-5BC9AB897A02"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build654:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CE0C48D-EE95-4762-ABA1-7D2F1DFFFC90"
            },
            {
              "criteria": "cpe:2.3:a:checkpoint:smartconsole:r81.20:build655:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B017667C-1FCC-4C2A-A8F1-151E86C8549A"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@checkpoint.com"
}