checkpoint smartconsole vulnerabilities

Latest checkpoint smartconsole CVEs

Newest publication first

1. CVE-2024-24915 SmartConsole Sensitive Credential Exposure via Memory Dump

   Published 2025-06-29

   High·CVSS 7.2 EPSS 0.21%

   Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

2. CVE-2024-24916 DLL-HiJacking

   Published 2025-06-19

   High·CVSS 7.8 EPSS 2.7%

   Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

3. CVE-2020-6024 Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation d...

   Published 2021-01-20

   High·CVSS 7.8 EPSS 0.27%

   Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticate...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.