Check Point Quantum Security Gateway Firmware R80.40
Approved changes feed: RSS · Atom
cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*
part: o version: r80.40 update: *
| Vendor | Checkpoint (963cc759-0773-5380-992a-923d56af82ce) |
|---|---|
| Product | Quantum Security Gateway Firmware (9b277f89-0285-502e-953e-d2043e0afbcd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-24919 |
vulnerable | 2026-06-03 14:55:06.102288 |
Information disclosure
HIGH (8.6)
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.
Published: 2024-05-28T18:22:19.401Z
Updated: 2025-10-21T23:05:17.408Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3449 |
vulnerable | 2026-06-03 14:45:11.171096 |
NULL pointer deref in signature_algorithms processing
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
Published: 2021-03-25T14:25:13.659Z
Updated: 2024-09-17T03:43:55.497Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.