Cybersecurity

Indian cyber security agency warns users about a bug in Checkpoint gateway products, ET Telecom


New Delhi: The Indian Computer Emergency Response Team (CERT-In) has warned about a vulnerability in Checkpoint Network Security gateway products, which could allow hackers to compromise users’ data.

According to its advisory by the national cyber-security agency, attackers can use the vulnerability to access certain information on “internet-connected gateways configured with IPSec VPN, remote access VPN, or mobile access software blades”.

This, in certain scenarios, could potentially lead the attacker to move laterally and gain domain admin privileges, warned the agency.

The vulnerability exists in Checkpoint Network Security gateway products due to the unrecommended password-only authentication method.

“The vulnerability (CVE-2024-24919) is being exploited in the wild,” said CERT-In, urging users to apply fixes issued by the company.

Checkpoint has discovered the vulnerability and issued the fix.

“Following our security update, Check Point’s dedicated task force continues investigating attempts to gain unauthorised access to VPN products used by our customers,” said the company in its security update.

“Exploiting this vulnerability can result in accessing sensitive information on the Security Gateway,” it added.

CERT-In, which comes under the Ministry of Electronics & Information Technology, last week warned users of vulnerabilities in Google Chrome and Siemens products, which could allow an attacker to execute arbitrary code on the targeted system.

  • Published On Jun 1, 2024 at 07:49 PM IST

Most Read in Internet

Join the community of 2M+ industry professionals

Subscribe to our newsletter to get latest insights & analysis.

Download ETTelecom App

  • Get Realtime updates
  • Save your favourite articles



Source

Related Articles

Back to top button