Vulnerability · Published Jun 29, 2025 · Assigned by checkpoint
CVE-2024-24915SmartConsole Sensitive Credential Exposure via Memory Dump
Medium 6.1
In plain English
A medium-severity security flaw in Check Point SmartConsole from checkpoint. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.2%top 89.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | Check Point SmartConsole | Check Point SmartConsole versions R81.10, R81.20, R82 |
Weakness: CWE-316 · Vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H