The Global Impact of CVE-2024-24919 in CheckPoint VPN Gateways

Censys analyzed CVE-2024-24919 — a critical zero-day arbitrary file read vulnerability affecting various Check Point VPN gateway products — reporting 13,754 Censys-visible exposed hosts as of June 3, 2024. The report highlights that the vulnerability is actively exploited, provides geographic and ASN exposure breakdowns (notably ~6,000 hosts in Japan and large counts on NTT networks), identifies ~554 potentially vulnerable Quantum Spark instances and 227 patched instances, notes that exploitation requires specific blades (IPSec VPN or Mobile Access) and may not yield full compromise, and lists Check Point patch versions and Censys queries to locate affected devices.