CVE-2024-24915 - CVE House
Back to Database
Status published Medium CVE-2024-24915

SmartConsole Sensitive Credential Exposure via Memory Dump

Vulnerability Description

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-24915

Credits & Attribution

No credits recorded in the NVD database.

References

More from checkpoint

View All →
CVE-2025-9142
Local privilege escalation in Harmony SASE Windows Agent
High 7.5
CVE-2025-8305
Information Disclosure in Identity Agent Debug Files
Medium 6.5
CVE-2025-8304
Information Disclosure in Identity Agent Registry Keys
Medium 6.5
CVE-2025-3831
Exposed SFTP server
High 8.1
CVE-2025-2028
Lack of TLS validation
Medium 6.5

Affected Vendor

Affected Software

Check Point SmartConsole
Vulnerable Versions:
Check Point SmartConsole versions R81.10, R81.20, R82

Timeline

Official Publish: June 29th, 2025
Last Modified: June 30th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-316

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.